<!doctype html><html lang="en"><head>
    <meta charset="utf-8">
    <title>BlackCat Ransomware (ALPHV) | Varonis</title>
    <link rel="shortcut icon" href="https://info.varonis.com/hubfs/logo-square.png">
    <meta name="description" content="Varonis has observed the ALPHV (BlackCat) ransomware, actively recruiting new affiliates and targeting organizations across multiple sectors worldwide.">
    <!-- get_asset_url //info.varonis.com/hubfs/raw_assets/public/hook-www-varonis/asset-path-test.png -->

    <link rel="preconnect" href="https://fonts.googleapis.com">
    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
    

    

    
    

    
    

    

    
    
    <script src="/hs/hsstatic/jquery-libs/static-1.4/jquery/jquery-1.11.2.js"></script>
<script>hsjQuery = window['jQuery'];</script>
    <meta property="og:description" content="Varonis has observed the ALPHV (BlackCat) ransomware, actively recruiting new affiliates and targeting organizations across multiple sectors worldwide.">
    <meta property="og:title" content="BlackCat Ransomware (ALPHV) | Varonis">
    <meta name="twitter:description" content="Varonis has observed the ALPHV (BlackCat) ransomware, actively recruiting new affiliates and targeting organizations across multiple sectors worldwide.">
    <meta name="twitter:title" content="BlackCat Ransomware (ALPHV) | Varonis">

    

    
    <style>
a.cta_button{-moz-box-sizing:content-box !important;-webkit-box-sizing:content-box !important;box-sizing:content-box !important;vertical-align:middle}.hs-breadcrumb-menu{list-style-type:none;margin:0px 0px 0px 0px;padding:0px 0px 0px 0px}.hs-breadcrumb-menu-item{float:left;padding:10px 0px 10px 10px}.hs-breadcrumb-menu-divider:before{content:'›';padding-left:10px}.hs-featured-image-link{border:0}.hs-featured-image{float:right;margin:0 0 20px 20px;max-width:50%}@media (max-width: 568px){.hs-featured-image{float:none;margin:0;width:100%;max-width:100%}}.hs-screen-reader-text{clip:rect(1px, 1px, 1px, 1px);height:1px;overflow:hidden;position:absolute !important;width:1px}
</style>

<link rel="stylesheet" href="//cdn2.hubspot.net/hub/142972/hub_generated/template_assets/60281971987/1644531487549/hook-www-varonis/css/templates/blog.min.css">

<style>

  blockquote {
    background-image: url(//info.varonis.com/hubfs/raw_assets/public/hook-www-varonis/images/quote.svg);
  }

</style>

<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Roboto+Mono:ital,wght@0,400;0,700;1,400;1,700&amp;display=swap">
<link rel="stylesheet" href="//cdn2.hubspot.net/hub/142972/hub_generated/template_assets/60281971998/1644531491233/hook-www-varonis/css/main.min.css">
<link rel="stylesheet" href="//cdn2.hubspot.net/hub/142972/hub_generated/template_assets/60281971978/1637606404676/hook-www-varonis/css/fonts.min.css">
<link rel="stylesheet" href="/hs/hsstatic/cos-LanguageSwitcher/static-1.11/sass/LanguageSwitcher.css">
<link rel="stylesheet" href="https://cdn2.hubspot.net/hub/142972/hub_generated/module_assets/60280511003/1638303822762/module_60280511003_blog-form.min.css">

<style>

  .blog-post-form {
    background-image: url("//info.varonis.com/hubfs/raw_assets/public/hook-www-varonis/images/bespoke/form-dot-texture.svg");
  }

</style>

    

    

<meta name="viewport" content="width=device-width, initial-scale=1">
<!-- Google Tag Manager -->
<script>(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
})(window,document,'script','dataLayer','GTM-KMGCX7V');</script>
<!-- End Google Tag Manager -->

<meta name="msvalidate.01" content="E8A82C06BCE9AAFECFF3DB24194B5921">

<script>
if (!window.hsInEditor){
  var _hsp = window._hsp = window._hsp || [];
_hsp.push(['addPrivacyConsentListener', function(consent) {
  console.log(consent.allowed); 
}]);
}
</script>

<meta name="google-site-verification" content="SG11DHFywv7TDto13RsMQLfiGEfaavjLu7Ur5vQnLRo">

<script defer data-domain="varonis.com" src="https://plausible.io/js/plausible.js"></script>


<meta property="og:image" content="https://info.varonis.com/hubfs/Blog_BlackCat_Hero_FNL.png#keepProtocol">
<meta property="og:image:width" content="1240">
<meta property="og:image:height" content="414">

<meta name="twitter:image" content="https://info.varonis.com/hubfs/Blog_BlackCat_Hero_FNL.png#keepProtocol">


<meta property="og:url" content="https://www.varonis.com/blog/blackcat-ransomware">
<meta name="twitter:card" content="summary_large_image">

<link rel="canonical" href="https://www.varonis.com/blog/blackcat-ransomware">

<meta property="og:type" content="article">
<link rel="alternate" type="application/rss+xml" href="https://www.varonis.com/blog/rss.xml">
<meta name="twitter:domain" content="www.varonis.com">
<script src="//platform.linkedin.com/in.js" type="text/javascript">
    lang: en_US
</script>

<meta http-equiv="content-language" content="en">
<link rel="alternate" hreflang="en" href="https://www.varonis.com/blog/blackcat-ransomware">
<link rel="alternate" hreflang="ru" href="https://www.varonis.com/ru/blog/alphv-blackcat-ransomware">
<link rel="alternate" hreflang="pt-br" href="https://www.varonis.com/pt-br/blog/alphv-blackcat-ransomware">
<link rel="alternate" hreflang="fr" href="https://www.varonis.com/fr/blog/alphv-blackcat-ransomware">
<link rel="alternate" hreflang="de" href="https://www.varonis.com/de/blog/alphv-blackcat-ransomware">






  <meta name="generator" content="HubSpot"></head>
  <body class="subtheme--light subtheme--dark--footer blog-post-template">
    <div class="body-wrapper   hs-content-id-64719293482 hs-blog-post hs-content-path-blog-blackcat-ransomware hs-content-name-blackcat-ransomware-alphv hs-blog-name-varonis-blog hs-blog-id-740355147">
      
        <div data-global-resource-path="hook-www-varonis/templates/partials/varonis-header.html">
<div class="site-nav">
  <div id="hs_cos_wrapper_site_nav" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module">






<div class="site-nav__main">
  <div class="site-nav__branding">
    <a href="#main-content" class="site-nav__skip">Skip navigation</a>

    <a href="https://www.varonis.com?hsLang=en" class="site-nav__home" aria-label="Varonis">
      <svg class="site-nav__logo" width="127" height="23" viewBox="0 0 127 23">
        <use href="#isvg-varonis-logo"></use>
      </svg>
    </a>
  </div>

  <div class="site-nav__toggle">
    <button class="site-toggle site-menu__toggle" aria-controls="site-nav-menu" aria-expanded="false">
      <span class="site-toggle__segment"></span>
      <span class="site-toggle__segment"></span>
      <span class="site-toggle__segment"></span>
    </button>
  </div>

  <div class="site-nav__menu" id="site-nav-menu" role="navigation" aria-label="Navigation Menu ">
    <div class="site-menu">
      
  

  <div class="site-menu__card" data-level="1">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      Platform
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <span role="none" class="site-menu__label">
        <span>
    
      <em>Products</em>
    
  </span>
      </span>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/data-security-platform?hsLang=en">
        <span>
    
      Overview
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
    
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="2" data-category="products">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      <span data-products>Data Protection</span>
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="3">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/datadvantage?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-datadvantage">&gt;</use></svg> <span><em>DatAdvantage</em><small>Data audit &amp; protection</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/automation-engine?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-automation-engine">&gt;</use></svg> <span><em>Automation Engine</em><small>Data remediation</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/dataprivilege?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-data-privilege">&gt;</use></svg> <span><em>DataPrivilege</em><small>Data access governance</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/data-transport-engine?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-data-transport-engine">&gt;</use></svg> <span><em>Data Transport Engine</em><small>Automated policy enforcement</small></span></span>
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
    
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="2" data-category="products">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      <span data-products>Threat Detection &amp; Response</span>
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="3">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/datalert?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-datalert">&gt;</use></svg> <span><em>DatAlert</em><small>Data-centric UBA</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/edge?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-edge">&gt;</use></svg> <span><em>Edge</em><small>Perimeter detections for DatAlert</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/active-directory?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-varonis-active-directory">&gt;</use></svg> <span><em>Varonis for Active Directory</em><small>Anomaly detection &amp; hardening</small></span></span>
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
    
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="2" data-category="products">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      <span data-products>Privacy &amp; Compliance</span>
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="3">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/data-classification-engine?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-data-classification-engine">&gt;</use></svg> <span><em>Data Classification Engine</em><small>Sensitive data discovery</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/policy-pack?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-policy-pack">&gt;</use></svg> <span><em>Policy Pack</em><small>GDPR &amp; CCPA discovery policies</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/federal-policy-pack?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-federal-policy-pack">&gt;</use></svg> <span><em>Federal Policy Pack</em><small>Top secret &amp; CUI discovery policies</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/data-classification-labels?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-data-classification-labels">&gt;</use></svg> <span><em>Data Classification Labels</em><small>Sensitive data labeling</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/datanswers?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-datanswers">&gt;</use></svg> <span><em>DatAnswers</em><small>DSARs, e-Discovery, PII search</small></span></span>
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
    
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="2" data-category="products">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      <span data-products>Cloud Security</span>
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="3">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/datadvantage-cloud?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-datadvantage-cloud">&gt;</use></svg> <span><em>DatAdvantage Cloud</em><small>SaaS &amp; IaaS Security</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products/data-classification-cloud?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-data-classification-engine">&gt;</use></svg> <span><em>Data Classification Cloud</em><small>Sensitive data discovery</small></span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/microsoft?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#product-varonis-m365">&gt;</use></svg> <span><em>Varonis for Microsoft 365</em><small>Data-centric security for M365</small></span></span>
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/products?hsLang=en">
        <span>
    
      <strong><em>See all products</em></strong>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <span role="none" class="site-menu__space">&nbsp;</span>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <span role="none" class="site-menu__label">
        <span>
    
      <em>Learn more</em>
    
  </span>
      </span>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/how-it-works?hsLang=en">
        <span>
    
      How It Works
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations?hsLang=en">
        <span>
    
      Integrations
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/apps?hsLang=en">
        <span>
    
      Third-party Apps
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="//info.varonis.com/price-quote?hsLang=en">
        <span>
    
      Pricing
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      Solutions
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      By Industry
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="3">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/industry/finance?hsLang=en">
        <span>
    
      Finance
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/industry/healthcare?hsLang=en">
        <span>
    
      Healthcare
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/industry/federal-government?hsLang=en">
        <span>
    
      Federal Government
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/industry/education?hsLang=en">
        <span>
    
      Education
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/industry/manufacturing?hsLang=en">
        <span>
    
      Manufacturing
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/state-local-government?hsLang=en">
        <span>
    
      State &amp; Local Government
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      By Use Case
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="3">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/use-case/cloud-data-protection?hsLang=en">
        <span>
    
      Cloud Data Protection
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/use-case/data-classification?hsLang=en">
        <span>
    
      Data Classification
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/use-case/data-loss-prevention?hsLang=en">
        <span>
    
      Data Loss Prevention
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/use-case/data-privacy-dsar?hsLang=en">
        <span>
    
      Data Privacy &amp; DSARs
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/use-case/insider-risk-management?hsLang=en">
        <span>
    
      Insider Risk Management
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/use-case/ransomware-prevention?hsLang=en">
        <span>
    
      Ransomware Prevention
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/use-case/zero-trust?hsLang=en">
        <span>
    
      Zero Trust
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  
    
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="2" data-category="technology">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      <span data-technology>By Technology</span>
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="3">
    
    
      
      
      
        <ul role="menu" class="site-menu__list">
          
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/microsoft?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-microsoft-365">&gt;</use></svg> <span>Microsoft 365</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/windows?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-windows-file-shares">&gt;</use></svg> <span>Windows File Shares</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/active-directory?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-active-directory">&gt;</use></svg> <span>Active Directory</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/google-drive?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-google-workspaces">&gt;</use></svg> <span>Google Drive</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/salesforce?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-salesforce">&gt;</use></svg> <span>Salesforce</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/nasuni?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-nasuni">&gt;</use></svg> <span>Nasuni</span></span>
    
  </span>
      </a>
    
  
  </li>

        </ul>
      
        <ul role="menu" class="site-menu__list">
          
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/unix-linux?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-unix-linux">&gt;</use></svg> <span>UNIX/Linux</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/box?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-box">&gt;</use></svg> <span>Box</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/slack?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-slack">&gt;</use></svg> <span>Slack</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/okta?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-okta">&gt;</use></svg> <span>Okta</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/github?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-github">&gt;</use></svg> <span>GitHub</span></span>
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations/netapp?hsLang=en">
        <span>
    
      <span class="site-menu__icon"><svg width="40" height="40" viewBox="0 0 40 40"><use href="#tech-netapp">&gt;</use></svg> <span>NetApp</span></span>
    
  </span>
      </a>
    
  
  </li>

        </ul>
      
      
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <div role="none" class="site-menu__item " data-level="3">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/integrations?hsLang=en">
        <span>
    
      <strong data-solo><em>See all integrations</em></strong>
    
  </span>
      </a>
    
  
  </div>

    
  
  </div>

    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      Why Varonis?
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/case-studies?hsLang=en">
        <span>
    
      Case Studies
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/operational-plan?hsLang=en">
        <span>
    
      Operational Plan
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/industry-recognition?hsLang=en">
        <span>
    
      Industry Recognition
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/customer-success?hsLang=en">
        <span>
    
      Customer Success
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/incident-response-team?hsLang=en">
        <span>
    
      IR &amp; Forensics Team
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="//info.varonis.com/resource/t1/research-report/forrester-tei-study-2020?hsLang=en">
        <span>
    
      Measurable ROI
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      Company
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/company?hsLang=en">
        <span>
    
      About Varonis
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/careers?hsLang=en">
        <span>
    
      Careers
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://ir.varonis.com">
        <span>
    
      Investor Relations
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/press?hsLang=en">
        <span>
    
      Press
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/corporate-responsibility?hsLang=en">
        <span>
    
      Corporate Responsibility
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/trust?hsLang=en">
        <span>
    
      Trust &amp; Security
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://brand.varonis.com?hsLang=en">
        <span>
    
      Brand
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/contact?hsLang=en">
        <span>
    
      Contact Us
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      Partners
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/partners/partner-program?hsLang=en">
        <span>
    
      Partner Program
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/partners/locator?hsLang=en">
        <span>
    
      Partner Locator
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://my.varonis.com/Login">
        <span>
    
      Partner Portal
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/partners/service-providers?hsLang=en">
        <span>
    
      Service Providers
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/apps?hsLang=en">
        <span>
    
      Technology Partners
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      Resources
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/support?hsLang=en">
        <span>
    
      Support
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/resources?hsLang=en">
        <span>
    
      Resource Library
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/blog">
        <span>
    
      Blog
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/free-security-courses?hsLang=en">
        <span>
    
      Free Security Courses
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/product-training?hsLang=en">
        <span>
    
      Product Training
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://info.varonis.com/securityfwd?hsLang=en">
        <span>
    
      SecurityFWD
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/webinars?hsLang=en">
        <span>
    
      Webinars
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/events?hsLang=en">
        <span>
    
      Events
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
    
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1" data-category="contact">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      <span data-contact>Contact Us</span>
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/support?hsLang=en">
        <span>
    
      Get support
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <span role="none" class="site-menu__label">
        <span>
    
      +1 (877) 292-8767
    
  </span>
      </span>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

      </ul>
    
  
  </div>

    </div>
  </div>

  <div class="site-nav__sidebar">
    <div class="site-nav__contact">
      <div class="site-menu">
        
  

  <div class="site-menu__card" data-level="1">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  
    
  

  
  
  
  

  
  
    
  

  

  

  

  

  <li role="none" class="site-menu__item  site-menu__item--has-children" data-level="1">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link  button button--white-outline" href="javascript:void(0)" aria-haspopup="true" aria-expanded="false">
        <span>
    
      <span data-button>Contact us</span>
    
  </span>
    <svg width="18" height="18" viewBox="0 0 18 18"><use href="#isvg-chevron-down"></use></svg>
  
      </a>
      
  

  <div class="site-menu__card" data-level="2">
    
    
      <ul role="menu" class="site-menu__list">
        
  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="//info.varonis.com/en/demo-request?hsLang=en">
        <span>
    
      Get a demo
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="https://www.varonis.com/support?hsLang=en">
        <span>
    
      Get support
    
  </span>
      </a>
    
  
  </li>

  
  
  
  

  
  
  

  
  
  

  
  

  
  
  
  

  
  

  

  

  

  

  <li role="none" class="site-menu__item " data-level="2">
    
    
      <a role="menuitem" class="site-menu__label site-menu__link " href="tel:18772928767">
        <span>
    
      +1 (877) 292-8767
    
  </span>
      </a>
    
  
  </li>

      </ul>
    
  
  </div>

    
  
  </li>

      </ul>
    
  
  </div>

      </div>
    </div>

    <button class="site-nav__search site-search__open" aria-label="Search">
      <svg width="16" height="16">
        <use href="#isvg-search"></use>
      </svg>
    </button>
  </div>
</div></div>

  <div class="site-search">
    <div class="site-search__content">
      <div class="site-search__input">
        <div class="gcse-searchbox-only" data-resultsUrl="/search-results/" data-newWindow="false"></div>
      </div>
    </div>
  </div>
</div></div>
      

      

<section class="blog-header">
  <div class="content-wrapper">
    <div class="blog-header__heading">
      <div id="hs_cos_wrapper_blog_header_heading" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module blog-header__heading-content widget-type-rich_text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><span id="hs_cos_wrapper_blog_header_heading_" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="rich_text"><h3 class="t-h300"><a href="https://www.varonis.com/blog">Inside Out Security</a></h3></span></div>

      <div class="blog-header__fields">
        <div id="hs_cos_wrapper_blog_header_localization" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module widget-type-language_switcher" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><span id="hs_cos_wrapper_blog_header_localization_" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_language_switcher" style="" data-hs-cos-general-type="widget" data-hs-cos-type="language_switcher"><div class="lang_switcher_class">
   <div class="globe_class" onclick="">
       <ul class="lang_list_class">
           <li>
               <a class="lang_switcher_link" data-language="en" lang="en" href="https://www.varonis.com/blog/blackcat-ransomware">English</a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="fr" lang="fr" href="https://www.varonis.com/fr/blog/alphv-blackcat-ransomware">French</a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="de" lang="de" href="https://www.varonis.com/de/blog/alphv-blackcat-ransomware">German</a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="pt-br" lang="pt-br" href="https://www.varonis.com/pt-br/blog/alphv-blackcat-ransomware">Portuguese - Brazil</a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="ru" lang="ru" href="https://www.varonis.com/ru/blog/alphv-blackcat-ransomware">Russian</a>
           </li>
       </ul>
   </div>
</div></span></div>
      </div>
    </div>
  </div>
</section>

<main id="main-content" class="body-container-wrapper blog-post content-wrapper">

  <div class="body-container body-container--blog-post">
    
    <section class="blog-post__intro">

      <p class="blog-post__breadcrumbs">
        <a href="https://www.varonis.com/blog">Inside Out Security Blog</a>
        
          
          &nbsp;
          /
          &nbsp;
          
          <a class="blog-post-tag-link" href="https://www.varonis.com/blog/tag/featured">Featured</a> &nbsp; / &nbsp; 
        
          
          <a class="blog-post-tag-link" href="https://www.varonis.com/blog/tag/threat-research">Threat Research</a>
        
       </p>

       <h1 class="t-h100 blog-post__title"><span id="hs_cos_wrapper_name" class="hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_text" style="" data-hs-cos-general-type="meta_field" data-hs-cos-type="text">BlackCat Ransomware (ALPHV)</span></h1>

       <div class="blog-post__description t-h500r">
         <div id="hs_cos_wrapper_blog_description" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module widget-type-rich_text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><span id="hs_cos_wrapper_blog_description_" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="rich_text"><span></span></span></div>
       </div>

       <div class="blog-post__info">
         <div id="hs_cos_wrapper_blog_post_multiple_authors" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><div class="blog-post__authors">
    <div class="blog-post__authors-images">
      
        
          <img class="blog-post__author-image" src="https://info.varonis.com/hubfs/jason-hill.jpg" alt="Jason Hill">
        
      

      
      
    </div>
    <div class="blog-post__author-names">
      
        <a href="https://www.varonis.com/blog/author/jason-hill">Jason Hill</a>
      

      
    </div>
</div></div>
         <span class="blog-post__separator">|</span>
         
         
         
         
         
         

         <p class="blog-post__time-read">
           <img class="blog-post__time-read-image" src="//info.varonis.com/hubfs/raw_assets/public/hook-www-varonis/images/clock.svg" alt="Clock for time it takes to read article">
            9 min read</p>
         <span class="blog-post__separator">|</span>
         <p class="blog-post__last-updated">Last updated January 26, 2022</p>
       </div>

       
        <img class="blog-post__featured-image" src="https://info.varonis.com/hubfs/Blog_BlackCat_Hero_FNL.png" alt="BlackCat Ransomware (ALPHV) | Varonis">
        
    </section>

    <section class="blog-post__main-content widget-type-rich_text">

      <article class="blog-post__content">
        <span id="hs_cos_wrapper_post_body" class="hs_cos_wrapper hs_cos_wrapper_meta_field hs_cos_wrapper_type_rich_text" style="" data-hs-cos-general-type="meta_field" data-hs-cos-type="rich_text"><p><span data-contrast="auto">Following <a href="https://www.nytimes.com/2022/01/14/world/europe/revil-ransomware-russia-arrests.html" rel="noopener" target="_blank">news</a>&nbsp;that members of the infamous ‘big-game hunter’ ransomware group REvil have been arrested by Russian law enforcement, effectively dismantling the group and their operations, it is likely that the group’s affiliates will migrate to other ransomware-as-a-service (RaaS) providers.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<!--more-->
<p><span data-contrast="auto">Varonis Threat Labs has observed one such RaaS provider, ALPHV (aka BlackCat ransomware), gaining traction since late 2021, actively recruiting new affiliates and targeting organizations across multiple sectors worldwide.&nbsp;</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Here are some of the key takeaways:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">The group is actively recruiting ex-REvil, BlackMatter, and DarkSide operators</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">Increased activity since November 2021</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Lucrative affiliate pay-outs (up to 90%)</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Rust-based ransomware executable (fast, cross-platform, heavily customized per victim)</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="5" data-aria-level="1"><span data-contrast="none">AES encryption by default</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Built-in privilege escalation (UAC bypass, Masquerade_PEB, CVE-2016-0099)</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="none">Can propagate to remote hosts via PsExec</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1"><span data-contrast="none">Deletes shadow copies using VSS Admin</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="8" aria-setsize="-1" data-aria-posinset="4" data-aria-level="1"><span data-contrast="none">Stops VMware ESXi virtual machines and deletes snapshot</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<p><span data-contrast="auto">The group’s leak site, active since early December 2021, has named over twenty victim organizations as of late January 2022, though the total number of victims, including those that have paid a ransom to avoid exposure, is likely greater.&nbsp;</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">This article seeks to provide an overview of this emerging ransomware threat, detailing both the Linux and Windows variants of their encryption tool.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<h2 aria-level="1"><span data-contrast="none">Background</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h2>
<p><span data-contrast="auto">First observed in November 2021, ALPHV, also known as ALPHV-ng, BlackCat, and Noberus, is a ransomware-as-a-service (RaaS) threat that targets organizations across multiple sectors worldwide using the triple-extortion tactic.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Building upon the common double-extortion tactic in which sensitive data is stolen prior to encryption and the victim threatened with its public release, triple-extortion adds the threat of a distributed denial-of-service (DDoS) attack if the ransomware group’s demands aren’t met.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Demonstrating prior experience in this threat space, such as the use of proven big-game hunter tactics, techniques, and procedures (TTP) and the apparent recent success, this threat was likely created by a former ransomware group member rather than a new-comer.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Going further, some cybercrime forum users have commented that ALPHV may even be an evolution or rebranding of <a href="/blog/blackmatter-ransomware?hsLang=en" rel="noopener" target="_blank">BlackMatter</a>, itself a ‘spin-off’ or successor of <a href="/blog/revil-msp-supply-chain-attack?hsLang=en" rel="noopener" target="_blank">REvil</a>&nbsp;and <a href="/blog/darkside-ransomware?hsLang=en" rel="noopener" target="_blank">DarkSide</a>.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Previously advertised on Russian-language cybercrime forums (Figure 1), affiliates are enticed to join the group with returns of up to ninety percent of any ransom collected.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><img src="https://info.varonis.com/hs-fs/hubfs/forum.png?width=1365&amp;name=forum.png" alt="Figure 1 – ALPHV Looking for WINDOWS/LINUX/ESX pentesters" width="1365" loading="lazy" style="width: 1365px;" srcset="https://info.varonis.com/hs-fs/hubfs/forum.png?width=683&amp;name=forum.png 683w, https://info.varonis.com/hs-fs/hubfs/forum.png?width=1365&amp;name=forum.png 1365w, https://info.varonis.com/hs-fs/hubfs/forum.png?width=2048&amp;name=forum.png 2048w, https://info.varonis.com/hs-fs/hubfs/forum.png?width=2730&amp;name=forum.png 2730w, https://info.varonis.com/hs-fs/hubfs/forum.png?width=3413&amp;name=forum.png 3413w, https://info.varonis.com/hs-fs/hubfs/forum.png?width=4095&amp;name=forum.png 4095w" sizes="(max-width: 1365px) 100vw, 1365px"></p>
<p style="font-size: 12px;"><em><span data-contrast="none" xml:lang="EN-GB" lang="EN-GB">Figure 1 – ALPHV ‘Looking for WINDOWS/LINUX/ESX pentesters’</span>&nbsp;</em></p>
<p><span data-contrast="auto">Working with these new affiliates, the initial intrusion of a victim network will likely use tried-and-tested techniques. For example, the exploitation of common vulnerabilities in network infrastructure devices such as VPN gateways and credential misuse via exposed remote desktop protocol (RDP) hosts.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Subsequently, those conducting ALPHV attacks have been observed as using PowerShell to modify Windows Defender security settings throughout the victim network as well as launching the ransomware binary, an interactive process, on multiple hosts using PsExec.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<h2 aria-level="1"><span data-contrast="none">Ransomware</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h2>
<p><span data-contrast="auto">Having gained initial access to a victim network, the group will undoubtedly conduct reconnaissance and lateral movement phases in which sensitive and valuable data will be identified for exfiltration and later encryption.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Utilizing their own ransomware executable, created afresh rather than being based on some existing threat, the threat actor will build a victim-specific threat that takes into account elements such as encryption performance, perhaps electing to only encrypt parts of large files, as well as embedded victim credentials to allow automated propagation of the ransomware payload to other servers.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Unlike many other ransomware threats, ALPHV was developed using Rust, a programming language known for its fast performance and cross-platform capabilities, leading to both Linux and Windows variants being observed throughout December 2021 and January 2022.&nbsp;</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Whilst many suggest that ALPHV could be the first ‘in-the-wild’ ransomware threat using this language, a <a href="https://github.com/cdong1012/Rust-Ransomware" rel="noopener" target="_blank">Rust ransomware</a> proof-of-concept was published on GitHub in June 2020 albeit there is nothing to suggest that the two are in any way related.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Notably, the use of Rust, amongst other modern languages including Golang and Nim, appears to be a growing trend amongst cybercrime threat actors over the past year or two.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">In addition to creating new cross-platform and high-performance threats, some threat actors have also taken to rewriting their older threats likely to evade detection and thwart analysis, as seen with the updated ‘Buer’ downloader dubbed ‘RustyBuer’.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Analysis of ALPHV samples collected recently indicates that the development process likely took place during early-to-mid November 2021 given the release history of Rust ‘crates’ (programming libraries) used.&nbsp;&nbsp;</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Specifically, recently observed ALPHV samples utilize ‘Zeroize’ version 1.4.3 which was not released until November 4, 2021, whilst also using public key cryptography versions that were superseded by versions released on November 16 and 17, 2021.&nbsp;</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Whilst many of the Rust crates used are somewhat obvious, such as the use of command-line interface and encryption libraries, the use of Zeroize, a library that securely clears secrets from memory, appears to be a deliberate attempt to prevent encryption secrets from being recovered from a compromised host.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<h3 aria-level="2"><span data-contrast="none">Configuration</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h3>
<p><span data-contrast="auto">Each victim-specific ALPHV ransomware binary has an embedded JSON data structure (Figure 2) that contains a tailored configuration taking into account the threat actor’s knowledge of the victim network.</span></p>
<p><span data-contrast="auto"><img src="https://info.varonis.com/hs-fs/hubfs/config.png?width=1678&amp;name=config.png" alt="config" width="1678" loading="lazy" style="width: 1678px;" srcset="https://info.varonis.com/hs-fs/hubfs/config.png?width=839&amp;name=config.png 839w, https://info.varonis.com/hs-fs/hubfs/config.png?width=1678&amp;name=config.png 1678w, https://info.varonis.com/hs-fs/hubfs/config.png?width=2517&amp;name=config.png 2517w, https://info.varonis.com/hs-fs/hubfs/config.png?width=3356&amp;name=config.png 3356w, https://info.varonis.com/hs-fs/hubfs/config.png?width=4195&amp;name=config.png 4195w, https://info.varonis.com/hs-fs/hubfs/config.png?width=5034&amp;name=config.png 5034w" sizes="(max-width: 1678px) 100vw, 1678px"></span></p>
<p style="font-size: 12px;"><em><span data-contrast="none" xml:lang="EN-GB" lang="EN-GB">Figure 2 – Example embedded JSON data structure</span>&nbsp;</em></p>
<p><span data-contrast="auto"><span data-contrast="auto" xml:lang="EN-GB" lang="EN-GB">Recently observed samples include configurations with a common set of options (Table 1) some of which apply to both variants&nbsp;and others that are operating system specific.</span></span></p>
<table data-tablestyle="MsoTable15List1LightAccent1" data-tablelook="1184" aria-rowcount="23" style="border-collapse: collapse; table-layout: fixed; margin-left: auto; margin-right: auto; border: 1px solid #99acc2; height: 1898px;">
<tbody>
<tr style="height: 29px;" aria-rowindex="1">
<td style="width: 239px; height: 29px; border-style: solid;" data-celllook="272">
<p><strong><span data-contrast="auto">Configuration Option</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 29px; border-style: solid;" data-celllook="4352">
<p><strong><span data-contrast="auto">Description</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 29px;" aria-rowindex="2">
<td style="width: 239px; height: 29px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">config_id</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 29px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Not set in recently observed samples.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 55px;" aria-rowindex="3">
<td style="width: 239px; height: 55px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">public_key</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 55px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Victim-specific RSA public key used to secure the encryption key.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 107px;" aria-rowindex="4">
<td style="width: 239px; height: 107px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">extension</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 107px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Victim-specific extension appended to encrypted files, a seemingly randomly generated string of seven lowercase alphanumeric characters (Regular Expression: </span><strong><span data-contrast="auto">[a-z0-9]{7}</span></strong><span data-contrast="auto">).</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 55px;" aria-rowindex="5">
<td style="width: 239px; height: 55px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">note_file_name</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 55px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Ransom note filename, set to ‘</span><i><span data-contrast="auto">RECOVER-${EXTENSION}-FILES.txt</span></i><span data-contrast="auto">’ in recently observed samples.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="6">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">note_full_text</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Ransom note text, consistent across recently observed samples with a victim-specific Tor onion address used for negotiations.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="7">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">note_short_text</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Windows desktop wallpaper text directing the victim to the ransom note, consistent across recently observed samples.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 271px;" aria-rowindex="8">
<td style="width: 239px; height: 271px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">default_file_mode</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 271px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Typically set to ‘Auto’ although two ‘SmartPattern’ values have been observed that result in a specified number of megabytes of each file being encrypted in steps of ten:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">map[SmartPattern:[1.048576e+07 10]]</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">map[SmartPattern:[3.145728e+07 10]]</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<p><span data-contrast="auto">These values would be set for performance reasons on specific victim hosts such as when dealing with very large files.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 55px;" aria-rowindex="9">
<td style="width: 239px; height: 55px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">default_file_cipher</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 55px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Set to ‘Best’ in all recently observed samples, attempts to use AES encryption first and falls back to ChaCha20.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="10">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">credentials</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Victim-specific, and likely used for propagation. Both domain and local administrator credentials have been observed in some samples.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 107px;" aria-rowindex="11">
<td style="width: 239px; height: 107px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">kill_services</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 107px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Typical list of common Windows services related to applications, backup utilities, security solutions and servers with some victim-specific services observed in recent samples.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 107px;" aria-rowindex="12">
<td style="width: 239px; height: 107px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">kill_processes</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 107px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Typical list of common Windows processes related to applications, backup utilities, security solutions and servers with victim-specific processes observed in recent samples.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="13">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">exclude_directory_names</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Typical list of Windows system directories to ensure that the host remains stable post-encryption (allowing the ransom note to be accessed).</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="14">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">exclude_file_names</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Typical list of Windows system files to ensure the host remains stable post-encryption (allowing the ransom note to be accessed).</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="15">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">exclude_file_extensions</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Typical list of Windows system file extensions to ensure the host remains stable post-encryption (allowing the ransom note to be accessed).</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="16">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">exclude_file_path_wildcard</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Not set in recently observed samples, excludes specified file paths from the encryption process on a per-host/victim basis.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="17">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">enable_network_discovery</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Boolean value, set to ‘true’ in recently observed samples and enabling network discovery via NetBIOS/SMB in search of other hosts to encrypt.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="18">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">enable_self_propagation</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Boolean value, mixed configurations observed in recent samples suggest this is configured on a per-host/victim basis.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="19">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">enable_set_wallpaper</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Boolean value, set to ‘true’ in recently observed samples resulting in the Windows desktop wallpaper displaying ‘note_short_text’.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 55px;" aria-rowindex="20">
<td style="width: 239px; height: 55px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">enable_esxi_vm_kill</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 55px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Boolean value, determines if VMware ESXi virtual machines will be terminated.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="21">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">enable_esxi_vm_snapshot_kill</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Boolean value, determines if VMware ESXi virtual machine snapshots will be removed (configuration option only present in recently observed Linux samples).</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 81px;" aria-rowindex="22">
<td style="width: 239px; height: 81px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">strict_include_paths</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 81px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Not set in recently observed samples, results in the encryption process only processing files within the specified paths.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
<tr style="height: 55px;" aria-rowindex="23">
<td style="width: 239px; height: 55px; border-style: solid;" data-celllook="16">
<p><strong><span data-contrast="auto">esxi_vm_kill_exclude</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
<td style="width: 454px; height: 55px; border-style: solid;" data-celllook="4096">
<p><span data-contrast="auto">Boolean value, excludes specific VMware ESXi virtual machines from the termination process</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></p>
</td>
</tr>
</tbody>
</table>
<p style="font-size: 12px;"><em> <span data-contrast="none" xml:lang="EN-GB" lang="EN-GB">Table 1 – ALPHV Configuration Options</span>&nbsp;</em></p>
<p><span data-contrast="auto">Although many options appear within the embedded configurations of both samples, it appears that the ransomware will ignore those that don’t apply to the host, for example, recently observed Windows samples include references to VMware ESXi, a platform supported by the Linux variant, whilst recently observed Linux samples retain references to Windows directories, files, and file extensions.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Based on the command-line options available to both variants, many of the embedded configuration options can likely be overridden at execution.&nbsp;</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<h3 aria-level="2"><span data-contrast="none">Command-line Interface</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h3>
<p><span data-contrast="auto">Launching the ransomware with the ‘--help’ parameter conveniently shows available options (Figure 3) and provides an insight into its capabilities.</span></p>
<p><img src="https://info.varonis.com/hs-fs/hubfs/win_cli.png?width=1576&amp;name=win_cli.png" alt="win_cli" width="1576" loading="lazy" style="width: 1576px;" srcset="https://info.varonis.com/hs-fs/hubfs/win_cli.png?width=788&amp;name=win_cli.png 788w, https://info.varonis.com/hs-fs/hubfs/win_cli.png?width=1576&amp;name=win_cli.png 1576w, https://info.varonis.com/hs-fs/hubfs/win_cli.png?width=2364&amp;name=win_cli.png 2364w, https://info.varonis.com/hs-fs/hubfs/win_cli.png?width=3152&amp;name=win_cli.png 3152w, https://info.varonis.com/hs-fs/hubfs/win_cli.png?width=3940&amp;name=win_cli.png 3940w, https://info.varonis.com/hs-fs/hubfs/win_cli.png?width=4728&amp;name=win_cli.png 4728w" sizes="(max-width: 1576px) 100vw, 1576px"></p>
<p style="font-size: 12px;"><i><span data-contrast="none">Figure 3 – ALPHV ‘Core’ Options (Windows variant)</span></i><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559685&quot;:864,&quot;335559737&quot;:864,&quot;335559738&quot;:200,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Differences in the options displayed may indicate an earlier version or victim/Windows-specific variant, with many options allowing the threat actor to override any embedded configuration.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">In addition to these core capabilities, analysis of a recent Linux variant provides insight (Figure 4) into support for VMware ESXi hosts including the ability to stop virtual machines and, if enabled, wipe virtual machine snapshots to thwart recovery efforts.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}"><img src="https://info.varonis.com/hs-fs/hubfs/linux_cli.png?width=1660&amp;name=linux_cli.png" alt="linux_cli" width="1660" loading="lazy" style="width: 1660px;" srcset="https://info.varonis.com/hs-fs/hubfs/linux_cli.png?width=830&amp;name=linux_cli.png 830w, https://info.varonis.com/hs-fs/hubfs/linux_cli.png?width=1660&amp;name=linux_cli.png 1660w, https://info.varonis.com/hs-fs/hubfs/linux_cli.png?width=2490&amp;name=linux_cli.png 2490w, https://info.varonis.com/hs-fs/hubfs/linux_cli.png?width=3320&amp;name=linux_cli.png 3320w, https://info.varonis.com/hs-fs/hubfs/linux_cli.png?width=4150&amp;name=linux_cli.png 4150w, https://info.varonis.com/hs-fs/hubfs/linux_cli.png?width=4980&amp;name=linux_cli.png 4980w" sizes="(max-width: 1660px) 100vw, 1660px"></span></p>
<p style="font-size: 12px;"><i><span data-contrast="none">Figure 4 – ALPHV ‘ESXi’ Options (Linux variant)</span></i><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559685&quot;:864,&quot;335559737&quot;:864,&quot;335559738&quot;:200,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Once initially launched, both the Linux and Windows variants include a multi-threaded worker pool that spawns a ‘file worker pool’ comprised of four workers that are used to open and modify each target file, replacing the original content with encrypted data.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<h2 aria-level="2"><span data-contrast="none">Windows Variant</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h2>
<p><span data-contrast="auto">Having initialized its core features, including the creation of the file worker pool, privilege escalation capabilities can be executed by the Windows variant under certain conditions.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Given that the manual execution of the ransomware element occurs post-intrusion, after the reconnaissance and data exfiltration stages, it is expected that the threat actor would already have elevated privileges.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Regardless, the following privilege escalation capabilities appear to be embedded within the ransomware and will likely increase the chance of success when propagated to other Windows hosts:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">‘<a href="https://github.com/FuzzySecurity/PowerShell-Suite/blob/master/Masquerade-PEB.ps1" rel="noopener" target="_blank">Masquerade_PEB</a>’, previously released as a proof-of-concept script [6] and used to give a PowerShell process the appearance of another process that in turn could allow elevated operations.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">User Account Control (UAC) bypass via an elevated COM interface, in this case abusing the Microsoft Connection Manager Admin API Helper for Setup COM object (cmstplua.dll):</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="2"><strong><span data-contrast="auto">%SYSTEM32%\DllHost.exe /Processid:{3E5FC7F9-9A51-4367-9063-A120244FBEC7}</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">CVE-2016-0099, a Secondary Logon Service exploit via the ‘CreateProcessWithLogonW’ API.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<p><span data-contrast="auto">Additionally, the Windows variant performs a number of processes prior to the encryption phase that differs&nbsp;from common ransomware threats, namely:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Acquiring the host universally unique identifier (UUID) using the Windows Management Interface command-line utility (WMIC) that, along with the ‘access token’ value, generates an ‘access-key’ to allow access to the victim-specific Tor site:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="2"><strong><span data-contrast="auto">wmic csproduct get UUID</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Enabling both ‘remote to local’ and ‘remote to remote’ symbolic links using the file system utility (fsutil) to allow the creation of links that redirects to some other file or directory:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="2"><strong><span data-contrast="auto">fsutil behavior set SymlinkEvaluation R2L:1</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="3" data-aria-level="2"><strong><span data-contrast="auto">fsutil behavior set SymlinkEvaluation R2R:1</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Setting the number of network requests the Server Service can make to the maximum, avoiding any remote file access issues when the encryption process executes, by updating the configuration in the Windows registry:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="2"><strong><span data-contrast="auto">reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters /v MaxMpxCt /d 65535 /t REG_DWORD /f</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Enumerating all local disk partitions and, if any hidden partitions are found, mounting these to allow additional data to be encrypted, potentially rendering recovery partitions useless.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1"><span data-contrast="auto">Propagation, if enabled, likely uses credentials contained within the embedded configuration and makes use of PsExec, a Microsoft Windows Sysinternals utility, to execute the ransomware on a remote host:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="2"><strong><span data-contrast="auto">psexec.exe -accepteula \\&lt;TARGET_HOST&gt; -u &lt;USERNAME&gt; -p &lt;PASSWORD&gt; -s -d -f -c &lt;ALPHV_EXECUTABLE&gt; [FLAGS] [OPTIONS] --access-token &lt;ACCESS_TOKEN&gt; [SUBCOMMAND]</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<p><span data-contrast="auto">In addition to suppressing the display of the PsExec license dialog (</span><strong><span data-contrast="auto">-accepteula</span></strong><span data-contrast="auto">), the propagated ransomware process will be executed using the SYSTEM account (</span><strong><span data-contrast="auto">-s</span></strong><span data-contrast="auto">) in a non-interactive session (</span><strong><span data-contrast="auto">-d</span></strong><span data-contrast="auto">), negating the need to wait for the remote process to complete, with the ransomware executable being copied to the remote host (</span><strong><span data-contrast="auto">-c</span></strong><span data-contrast="auto">) and overwriting any existing file (</span><strong><span data-contrast="auto">-f</span></strong><span data-contrast="auto">).</span><span>&nbsp;<br></span><span data-contrast="auto">Notably, the legitimate PsExec executable is embedded within the Windows variant and is dropped in the victim’s </span><strong><span data-contrast="auto">%TEMP%</span></strong><span data-contrast="auto"> directory.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">As expected, common Windows ransomware traits are also performed:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Deletion of shadow copies using the Volume Shadow Copy Service (VSS) administrative utility (vssadmin) to thwart recovery efforts:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="2"><strong><span data-contrast="auto">vssadmin.exe delete shadows /all /quiet</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Terminating the processes and/or services specified within the configuration to minimize the number of locked (open) files as well as potentially disabling backup utilities and security software to evade detection.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Emptying the Recycle Bin.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<p><span data-contrast="auto">Defaulting to AES encryption, signified by the ‘best’ configuration option, the process can fallback or be overridden to use ChaCha20.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">After a file has been encrypted, the pre-configured seven-character alphanumeric file extension is appended to the filename, a value that appears to differ between victims.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Following the encryption phase, a number of final tasks are performed:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Network discovery, using NetBIOS and SMB, likely in preparation for propagation, seemingly including the use of native address resolution protocol (ARP) command to gather the IP and MAC addresses from the ARP table (a list of hosts known to the victim host):</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="2"><strong><span data-contrast="auto">arp -a</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Creating the predefined ransom note in each folder containing encrypted files as well as an image containing the short ransom note on the Desktop of all users:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="2"><strong><span data-contrast="auto">RECOVER-&lt;ENCRYPTED_FILE_EXTENSION&gt;-FILES.txt</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="3" data-aria-level="2"><strong><span data-contrast="auto">%USERPROFILE%\Desktop\RECOVER-&lt;ENCRYPTED_FILE_EXTENSION&gt;-FILES.txt.png</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Setting the desktop wallpaper (Figure 5) to the dropped PNG image file for each user through a Windows registry key update:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}"> </span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><strong style="background-color: transparent; font-size: 1rem;"><span data-contrast="auto">HKEY_USERS\&lt;SID&gt;\Control Panel\Desktop\WallPaper = "C:\\Users\\&lt;USERNAME&gt;\\Desktop\\RECOVER-&lt;ENCRYPTED_FILE_EXTENSION&gt;-FILES.txt.png"</span></strong><span style="background-color: transparent; font-size: 1rem;">&nbsp;</span></li>
</ul>
<span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}"></span><br><img src="https://info.varonis.com/hs-fs/hubfs/wallpaper.png?width=1024&amp;name=wallpaper.png" alt="wallpaper" width="1024" loading="lazy" style="width: 1024px;" srcset="https://info.varonis.com/hs-fs/hubfs/wallpaper.png?width=512&amp;name=wallpaper.png 512w, https://info.varonis.com/hs-fs/hubfs/wallpaper.png?width=1024&amp;name=wallpaper.png 1024w, https://info.varonis.com/hs-fs/hubfs/wallpaper.png?width=1536&amp;name=wallpaper.png 1536w, https://info.varonis.com/hs-fs/hubfs/wallpaper.png?width=2048&amp;name=wallpaper.png 2048w, https://info.varonis.com/hs-fs/hubfs/wallpaper.png?width=2560&amp;name=wallpaper.png 2560w, https://info.varonis.com/hs-fs/hubfs/wallpaper.png?width=3072&amp;name=wallpaper.png 3072w" sizes="(max-width: 1024px) 100vw, 1024px"><br>
<p style="font-size: 12px;"><em><span data-contrast="none" xml:lang="EN-GB" lang="EN-GB">Figure 5 – Desktop wallpaper post-encryption</span>&nbsp;</em></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Repeating the shadow copy deletion process using vssadmin.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Using the Windows Event Log utility (wevtutil) to list and then clear all event logs:</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="o" data-font="Courier New" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="2"><strong><span data-contrast="auto">for /F \"tokens=*\" %1 in ('wevtutil.exe el') DO wevtutil.exe cl \"%1\""</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<h3 aria-level="2"><span data-contrast="none">VMware ESXi Behaviour</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h3>
<p><span data-contrast="auto">Assuming the ESXi options are not disabled, the VMware ESXi command-line interface utility (esxcli) is called and generates a comma-separated list of all running virtual machines:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="auto">esxcli --formatter=csv --format-param=fields=="WorldID,DisplayName" vm process list</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<p><span data-contrast="auto">The output of this command is subsequently ‘piped’ to AWK, a text-processing utility, to parse the result and launch the ESXI command-line interface utility to force terminate each virtual machine:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="auto">awk -F "\"*,\"*" '{system("esxcli vm process kill --type=force --world-id="$1)}'</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<p><span data-contrast="auto">Utilizing the VMware Virtual Infrastructure Management utility (vimcmd), another list of virtual machines is gathered and parsed, the results of which are passed back to vimcmd with the ‘snapshot.removeall’ command that results in any, and all, snapshots being deleted:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><strong><span data-contrast="auto">for i in `vim-cmd vmsvc/getallvms| awk '{print$1}'`;do vim-cmd vmsvc/snapshot.removeall $i &amp; done</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<h2 aria-level="1"><span data-contrast="none">Victimology</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h2>
<p><span data-contrast="auto">As is common with big-game hunter ransomware threats, victims are typically large organizations from which bigger ransoms can be extorted with reports suggesting that demands have ranged from US$400K up to $3M payable in cryptocurrency.</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<p><span data-contrast="auto">Whilst the true number of victims is unknown, over twenty organizations have been named on the group’s Tor ‘leak site’, across a variety of sectors and countries including:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Australia, Bahamas, France, Germany, Italy, Netherlands, Philippines, Spain, United Kingdom, and the United States.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><span data-contrast="auto">Business services, construction, energy, fashion, finance, logistics, manufacturing, pharmaceutical, retail, and technology.</span><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<h2 aria-level="1"><span data-contrast="none">Indicators of Compromise (IOC)</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:240,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h2>
<h3 aria-level="2"><span data-contrast="none">Linux Processes</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h3>
<p><span data-contrast="auto">The following legitimate, albeit suspicious, processes were spawned by the Linux/VMware ESXi variant:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="auto">esxcli --formatter=csv --format-param=fields=="WorldID,DisplayName" vm process list | awk -F "\"*,\"*" '{system("esxcli vm process kill --type=force --world-id="$1)}'</span></strong><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><strong><span data-contrast="auto">for i in `vim-cmd vmsvc/getallvms| awk '{print$1}'`;do vim-cmd vmsvc/snapshot.removeall $i &amp; done</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<h3 aria-level="2"><span data-contrast="none">Windows Processes</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h3>
<p><span data-contrast="auto">The following legitimate, albeit suspicious, processes were spawned by the Windows variant:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="auto">arp -a</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><strong><span data-contrast="auto">%SYSTEM32%\DllHost.exe /Processid:{3E5FC7F9-9A51-4367-9063-A120244FBEC7}</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1"><strong><span data-contrast="auto">for /F \"tokens=*\" %1 in ('wevtutil.exe el') DO wevtutil.exe cl \"%1\""</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="4" data-aria-level="1"><strong><span data-contrast="auto">fsutil behavior set SymlinkEvaluation R2L:1</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="5" data-aria-level="1"><strong><span data-contrast="auto">fsutil behavior set SymlinkEvaluation R2R:1</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1"><strong><span data-contrast="auto">psexec.exe -accepteula \\&lt;TARGET_HOST&gt; -u &lt;USERNAME&gt; -p &lt;PASSWORD&gt; -s -d -f -c &lt;ALPHV_EXECUTABLE&gt; [FLAGS] [OPTIONS] --access-token &lt;ACCESS_TOKEN&gt; [SUBCOMMAND]</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1"><strong><span data-contrast="auto">reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters /v MaxMpxCt /d 65535 /t REG_DWORD /f</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="" data-font="Symbol" data-listid="2" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1"><strong><span data-contrast="auto">wmic csproduct get UUID</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<h3 aria-level="2"><span data-contrast="none">Linux Ransomware Executables (SHA256)</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h3>
<p><span data-contrast="auto">Given that each sample is victim-specific, the following are provided for research rather than detection purposes:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">3a08e3bfec2db5dbece359ac9662e65361a8625a0122e68b56cd5ef3aedf8ce1</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">5121f08cf8614a65d7a86c2f462c0694c132e2877a7f54ab7fcefd7ee5235a42</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">9802a1e8fb425ac3a7c0a7fca5a17cfcb7f3f5f0962deb29e3982f0bece95e26</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">e7060538ee4b48b0b975c8928c617f218703dab7aa7814ce97481596f2a78556</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">f7a038f9b91c40e9d67f4168997d7d8c12c2d27cd9e36c413dd021796a24e083</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">f8c08d00ff6e8c6adb1a93cd133b19302d0b651afd73ccb54e3b6ac6c60d99c6</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<h3 aria-level="2"><span data-contrast="none">Windows Ransomware Executables (SHA256)</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559738&quot;:40,&quot;335559739&quot;:0,&quot;335559740&quot;:259}">&nbsp;</span></h3>
<p><span data-contrast="auto">Given that each sample is victim-specific, the following are provided for research rather than detection purposes:</span><span data-ccp-props="{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></p>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">0c6f444c6940a3688ffc6f8b9d5774c032e3551ebbccb64e4280ae7fc1fac479</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">13828b390d5f58b002e808c2c4f02fdd920e236cc8015480fa33b6c1a9300e31</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">15b57c1b68cd6ce3c161042e0f3be9f32d78151fe95461eedc59a79fc222c7ed</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">1af1ca666e48afc933e2eda0ae1d6e88ebd23d27c54fd1d882161fd8c70b678e</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">2587001d6599f0ec03534ea823aab0febb75e83f657fadc3a662338cc08646b0</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">28d7e6fe31dc00f82cb032ba29aad6429837ba5efb83c2ce4d31d565896e1169</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">2cf54942e8cf0ef6296deaa7975618dadff0c32535295d3f0d5f577552229ffc</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">38834b796ed025563774167716a477e9217d45e47def20facb027325f2a790d1</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">3d7cf20ca6476e14e0a026f9bdd8ff1f26995cdc5854c3adb41a6135ef11ba83</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">4e18f9293a6a72d5d42dad179b532407f45663098f959ea552ae43dbb9725cbf</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">59868f4b346bd401e067380cac69080709c86e06fae219bfb5bc17605a71ab3f</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">5bdc0fb5cfbd42de726aacc40eddca034b5fa4afcc88ddfb40a3d9ae18672898</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">658e07739ad0137bceb910a351ce3fe4913f6fcc3f63e6ff2eb726e45f29e582</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">7154fdb1ef9044da59fcfdbdd1ed9abc1a594cacb41a0aeddb5cd9fdaeea5ea8</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">722f1c1527b2c788746fec4dd1af70b0c703644336909735f8f23f6ef265784b</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">731adcf2d7fb61a8335e23dbee2436249e5d5753977ec465754c6b699e9bf161</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">7b2449bb8be1b37a9d580c2592a67a759a3116fe640041d0f36dc93ca3db4487</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">7e363b5f1ba373782261713fa99e8bbc35ddda97e48799c4eb28f17989da8d8e</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">9f6876762614e407d0ee6005f165dd4bbd12cb21986abc4a3a5c7dc6271fcdc3</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">aae77d41eba652683f3ae114fadec279d5759052d2d774f149f3055bf40c4c14</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">b588823eb5c65f36d067d496881d9c704d3ba57100c273656a56a43215f35442</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">bd337d4e83ab1c2cacb43e4569f977d188f1bb7c7a077026304bf186d49d4117</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">be8c5d07ab6e39db28c40db20a32f47a97b7ec9f26c9003f9101a154a5a98486</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">c3e5d4e62ae4eca2bfca22f8f3c8cbec12757f78107e91e85404611548e06e40</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">c5ad3534e1c939661b71f56144d19ff36e9ea365fdb47e4f8e2d267c39376486</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">c8b3b67ea4d7625f8b37ba59eed5c9406b3ef04b7a19b97e5dd5dab1bd59f283</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">cda37b13d1fdee1b4262b5a6146a35d8fc88fa572e55437a47a950037cc65d40</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
</ul>
<ul>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">cefea76dfdbb48cfe1a3db2c8df34e898e29bec9b2c13e79ef40655c637833ae</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">d767524e1bbb8d50129485ffa667eb1d379c745c30d4588672636998c20f857f</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}">&nbsp;</span></li>
<li data-leveltext="•" data-font="Calibri" data-listid="5" aria-setsize="-1" data-aria-posinset="0" data-aria-level="1"><strong><span data-contrast="auto">f837f1cd60e9941aa60f7be50a8f2aaaac380f560db8ee001408f35c1b7a97cb</span></strong><span data-ccp-props="{&quot;134233279&quot;:true,&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}"> </span>&nbsp;</li>
</ul>
<p>&nbsp;</p></span>

        <div id="hs_cos_wrapper_blog_post_form" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module">



</div>

        <div id="hs_cos_wrapper_blog_post_secondary_content" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module widget-type-rich_text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><span id="hs_cos_wrapper_blog_post_secondary_content_" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_rich_text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="rich_text"><span></span></span></div>
        <div class="blog-post__author">
          
            
              <img src="https://info.varonis.com/hubfs/jason-hill.jpg" alt="Jason Hill">
            
            <div class="blog-post__author-info">
              <h5 class="blog-post__author-name">Jason Hill</h5>
              
                <p class="blog-post__author-bio">Jason is a Security Researcher within the Varonis Research Team and has a penchant for all things threat intelligence. Equally happy analyzing nefarious files or investigating badness, Jason is driven by the desire to make the cyberworld a safer place.</p>
              
            </div>
          
        </div>
      </article>
    </section>
    

    
    
    

    
  
      
        <section class="blog-related-posts widget-type-rich_text">
            <h3>Keep reading</h3>
            <div class="blog-related-posts__list">
      
              <article class="blog-related-posts__post" aria-label="Blog post summary: BlackMatter Ransomware: In-Depth Analysis &amp; Recommendations">
                
                  <a class="blog-related-posts__post-image-wrapper" href="https://www.varonis.com/blog/blackmatter-ransomware?hsLang=en" aria-label="Read full post: BlackMatter Ransomware: In-Depth Analysis &amp; Recommendations">
                    <div class="blog-related-posts__image" style="background-image: url(https://142972.fs1.hubspotusercontent-na1.net/hubfs/142972/Imported_Blog_Media/threat-modeling-hero-4.png)" title=""></div>
                  </a>
                
                <div class="blog-related-posts__content-area">
                  <div class="blog-related-posts__info">
                    
                      <a class="blog-related-posts__tag" href="https://www.varonis.com/blog/tag/threat-research">Threat Research</a>
                      <span class="blog-related-posts__separator"> | </span>
                    
                    <p class="blog-related-posts__published">November 2, 2021</p>
                  </div>
                  <h5 class="blog-related-posts__title"><a href="https://www.varonis.com/blog/blackmatter-ransomware?hsLang=en">BlackMatter Ransomware: In-Depth Analysis &amp; Recommendations</a></h5>

                  <div class="blog-related-posts__authors">
                    
                    
                    <div class="blog-post__authors-images">
                      
                        
                          <img class="blog-post__author-image" src="https://info.varonis.com/hubfs/jason-hill.jpg" alt="Jason Hill">
                        
                      
                      
                    </div>

                    <div class="blog-post__author-names">
                      <span class="blog-post__author-by">By </span>
                      
                        <a href="https://www.varonis.com/blog/author/jason-hill">Jason Hill</a>
                      
                      
                    </div>
                  </div>
                </div>
              </article>
        
    

  
      
              <article class="blog-related-posts__post" aria-label="Blog post summary: Good for Evil: DeepBlueMagic Ransomware Group Abuses Legit Encryption Tools">
                
                  <a class="blog-related-posts__post-image-wrapper" href="https://www.varonis.com/blog/deepbluemagic-ransomware?hsLang=en" aria-label="Read full post: Good for Evil: DeepBlueMagic Ransomware Group Abuses Legit Encryption Tools">
                    <div class="blog-related-posts__image" style="background-image: url(https://142972.fs1.hubspotusercontent-na1.net/hubfs/142972/Imported_Blog_Media/Healthcare-Data-Risk-Report-hero-blog-1.png)" title=""></div>
                  </a>
                
                <div class="blog-related-posts__content-area">
                  <div class="blog-related-posts__info">
                    
                      <a class="blog-related-posts__tag" href="https://www.varonis.com/blog/tag/threat-research">Threat Research</a>
                      <span class="blog-related-posts__separator"> | </span>
                    
                    <p class="blog-related-posts__published">October 19, 2021</p>
                  </div>
                  <h5 class="blog-related-posts__title"><a href="https://www.varonis.com/blog/deepbluemagic-ransomware?hsLang=en">Good for Evil: DeepBlueMagic Ransomware Group Abuses Legit Encryption Tools</a></h5>

                  <div class="blog-related-posts__authors">
                    
                    
                    <div class="blog-post__authors-images">
                      
                        
                          <img class="blog-post__author-image" src="https://info.varonis.com/hubfs/jason-hill.jpg" alt="Jason Hill">
                        
                      
                      
                    </div>

                    <div class="blog-post__author-names">
                      <span class="blog-post__author-by">By </span>
                      
                        <a href="https://www.varonis.com/blog/author/jason-hill">Jason Hill</a>
                      
                      
                    </div>
                  </div>
                </div>
              </article>
        
            </div>
        </section>
      
    


    

  </div>
</main>



      
        <div data-global-resource-path="hook-www-varonis/templates/partials/varonis-footer.html">

<footer class="global-footer">

  <div class="global-footer__content content-wrapper">

    <div class="global-footer__lang-selector">
      
        <div id="hs_cos_wrapper_footer_localization" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module widget-type-language_switcher" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><span id="hs_cos_wrapper_footer_localization_" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_language_switcher" style="" data-hs-cos-general-type="widget" data-hs-cos-type="language_switcher"><div class="lang_switcher_class">
   <div class="globe_class" onclick="">
       <ul class="lang_list_class">
           <li>
               <a class="lang_switcher_link" data-language="en" lang="en" href="https://www.varonis.com/blog/blackcat-ransomware">English</a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="de" lang="de" href="https://www.varonis.com/de/blog/alphv-blackcat-ransomware">Deutsch</a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="fr" lang="fr" href="https://www.varonis.com/fr/blog/alphv-blackcat-ransomware">Français</a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="pt-br" lang="pt-br" href="https://www.varonis.com/pt-br/blog/alphv-blackcat-ransomware">Português - Brasil </a>
           </li>
           <li>
               <a class="lang_switcher_link" data-language="ru" lang="ru" href="https://www.varonis.com/ru/blog/alphv-blackcat-ransomware">Русский</a>
           </li>
       </ul>
   </div>
</div></span></div>
      
    </div>

    <div class="global-footer__nav">
      <div class="global-footer__links">
        <div id="hs_cos_wrapper_footer_links" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module global-footer__links-list--desktop" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><ul class="global-footer__links-list">
  
    <li class="global-footer__links-item global-footer__links-item--text">
      <a href="/legal?hsLang=en" class="global-footer__links-link" title="Legal" target="_blank" rel="noopener noreferrer">
        Legal
      </a>
    </li>

    
      <li class="global-footer__links-item global-footer__links-item--divider">|</li>
    
  
    <li class="global-footer__links-item global-footer__links-item--text">
      <a href="/trust?hsLang=en" class="global-footer__links-link" title="Trust" target="_blank" rel="noopener noreferrer">
        Trust
      </a>
    </li>

    
  
</ul></div>

        <div id="hs_cos_wrapper_footer_links_icons" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><ul class="global-footer__links-list global-footer__links-list--icons">
  
    <li class="global-footer__links-item global-footer__links-item--icon">
      <a href="https://www.facebook.com/VaronisSystems/" class="global-footer__links-icon" title="Facebook" target="_blank" rel="noopener noreferrer">
        <svg>
          <use xlink:href="#logo-facebook"></use>
        </svg>
      </a>
    </li>
  
    <li class="global-footer__links-item global-footer__links-item--icon">
      <a href="https://www.linkedin.com/company/varonis" class="global-footer__links-icon" title="Linkedin" target="_blank" rel="noopener noreferrer">
        <svg>
          <use xlink:href="#logo-linkedin"></use>
        </svg>
      </a>
    </li>
  
    <li class="global-footer__links-item global-footer__links-item--icon">
      <a href="https://twitter.com/varonis?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Eauthor" class="global-footer__links-icon" title="Twitter" target="_blank" rel="noopener noreferrer">
        <svg>
          <use xlink:href="#logo-twitter"></use>
        </svg>
      </a>
    </li>
  
</ul></div>
      </div>
    </div>
  </div>

  <div class="global-footer__date content-wrapper">

    <div id="hs_cos_wrapper_footer_links" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module global-footer__links-list--mobile" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><ul class="global-footer__links-list">
  
    <li class="global-footer__links-item global-footer__links-item--text">
      <a href="/legal?hsLang=en" class="global-footer__links-link" title="Legal" target="_blank" rel="noopener noreferrer">
        Legal
      </a>
    </li>

    
      <li class="global-footer__links-item global-footer__links-item--divider">|</li>
    
  
    <li class="global-footer__links-item global-footer__links-item--text">
      <a href="/trust?hsLang=en" class="global-footer__links-link" title="Trust" target="_blank" rel="noopener noreferrer">
        Trust
      </a>
    </li>

    
  
</ul></div>

    <span>
      © 2022 
      <div id="hs_cos_wrapper_job_title" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_module widget-type-text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="module"><span id="hs_cos_wrapper_job_title_" class="hs_cos_wrapper hs_cos_wrapper_widget hs_cos_wrapper_type_text" style="" data-hs-cos-general-type="widget" data-hs-cos-type="text">Varonis</span></div>
    </span>
  </div>

</footer></div>
      
    </div>
    

    
    
<script>
(function () {
    window.addEventListener('load', function () {
        setTimeout(function () {
            var xhr = new XMLHttpRequest();
            xhr.open('POST', '/_hcms/perf', true /*async*/);
            xhr.setRequestHeader("Content-type", "application/json");
            xhr.onreadystatechange = function () {
                // do nothing.
            };
            var connection = navigator.connection || navigator.mozConnection || navigator.webkitConnection;
            function populateNetworkInfo(name, connection, info) {
                if (name in connection) {
                    info[name] = connection[name];
                }
            }
            var networkInfo = {};
            if (connection) {
                ['type', 'effectiveType', 'downlink', 'rtt'].forEach(function(name) {
                    populateNetworkInfo(name, connection, networkInfo);
                });
            }
            var perfData = {
                url: location.href,
                portal: 142972,
                content: 64719293482,
                group: -1,
                connection: networkInfo,
                timing: performance.timing
            };
            xhr.send(JSON.stringify(perfData));
        }, 3000);  // Execute this 3 seconds after onload.
    });
})();
</script>

<script src="https://cse.google.com/cse.js?cx=d594e21cf961c2c72"></script>
<script src="//cdn2.hubspot.net/hub/142972/hub_generated/template_assets/60281972084/1644531487832/hook-www-varonis/js/main.min.js"></script>
<script>
var hsVars = hsVars || {}; hsVars['language'] = 'en';
</script>

<script src="/hs/hsstatic/cos-i18n/static-1.53/bundles/project.js"></script>
<script src="https://cdn2.hubspot.net/hub/142972/hub_generated/module_assets/60280511003/1638303822690/module_60280511003_blog-form.min.js"></script>

<!-- Start of HubSpot Analytics Code -->
<script type="text/javascript">
var _hsq = _hsq || [];
_hsq.push(["setContentType", "blog-post"]);
_hsq.push(["setCanonicalUrl", "https:\/\/www.varonis.com\/blog\/blackcat-ransomware"]);
_hsq.push(["setPageId", "64719293482"]);
_hsq.push(["setContentMetadata", {
    "contentPageId": 64719293482,
    "legacyPageId": "64719293482",
    "contentFolderId": null,
    "contentGroupId": 740355147,
    "abTestId": null,
    "languageVariantId": 64719293482,
    "languageCode": "en",
    
}]);
</script>

<script type="text/javascript" id="hs-script-loader" async defer src="/hs/scriptloader/142972.js"></script>
<!-- End of HubSpot Analytics Code -->


<script type="text/javascript">
var hsVars = {
    ticks: 1648505270361,
    page_id: 64719293482,
    
    content_group_id: 740355147,
    portal_id: 142972,
    app_hs_base_url: "https://app.hubspot.com",
    cp_hs_base_url: "https://cp.hubspot.com",
    language: "en",
    analytics_page_type: "blog-post",
    analytics_page_id: "64719293482",
    category_id: 3,
    folder_id: 0,
    is_hubspot_user: false
}
</script>


<script defer src="/hs/hsstatic/HubspotToolsMenu/static-1.119/js/index.js"></script>



<div id="fb-root"></div>
 <script>(function(d, s, id) {
  var js, fjs = d.getElementsByTagName(s)[0];
  if (d.getElementById(id)) return;
  js = d.createElement(s); js.id = id;
  js.src = "//connect.facebook.net/en_GB/all.js#xfbml=1&status=0";
  fjs.parentNode.insertBefore(js, fjs);
}(document, 'script', 'facebook-jssdk'));</script>
 <script>!function(d,s,id){var js,fjs=d.getElementsByTagName(s)[0];if(!d.getElementById(id)){js=d.createElement(s);js.id=id;js.src="https://platform.twitter.com/widgets.js";fjs.parentNode.insertBefore(js,fjs);}}(document,"script","twitter-wjs");</script>
 



    <div aria-hidden="true" class="svg-pure-defs">
      <svg xmlns="http://www.w3.org/2000/svg">
 <defs>
  <lineargradient x1="13.926%" y1="27.937%" x2="69.206%" y2="87.079%" id="linearGradient-1">
   <stop stop-color="#6708FF" offset="0%" />
   <stop stop-color="#0075FF" offset="100%" />
  </lineargradient>
  <lineargradient x1="13.926%" y1="27.937%" x2="69.206%" y2="87.079%" id="isvg-workflow-with-icons-frame__grad">
   <stop stop-color="#6708FF" offset="0%" />
   <stop stop-color="#0075FF" offset="100%" />
  </lineargradient>
 </defs>
 <symbol id="isvg-365-arrow" viewBox="0 0 122 10">
  <g fill="none" fill-rule="evenodd">
   <path d="M1 4.5h111.238" stroke="#0075FF" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" stroke-dasharray="0,4.4" />
   <path fill="#0075FF" d="m122 5-6 5V0z" />
  </g>
 </symbol>
 <symbol id="isvg-align" viewBox="0 0 24 24">
  <path d="M23 1v22H1V1h22m1-1H0v24h24V0z" style="fill:red" />
  <path d="M19 5v14H5V5h14m1-1H4v16h16V4z" style="fill:#00f" />
 </symbol>
 <symbol id="isvg-arrow-left-long">
  <path d="M10 1 2 8l8 7m22-7H3" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-arrow-left" viewBox="0 0 24 24">
  <path d="m12 20-6-5 6-5m-6 5h13" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-arrow-right-long">
  <path d="m22 1 8 7-8 7M0 8h29" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-arrow-right" viewBox="0 0 24 24">
  <path d="m12 10 6 5-6 5m-7-5h13" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-bullet">
  <g fill="none" fill-rule="evenodd">
   <circle fill="#626BDF" cx="8" cy="8" r="4" />
   <circle stroke="#626BDF" cx="8" cy="8" r="7.5" />
  </g>
 </symbol>
 <symbol id="isvg-calendar">
  <path stroke="currentColor" stroke-width="1.5" fill="none" stroke-linecap="round" stroke-linejoin="round" d="M2 21.182h20.015V4.184H2zm0-11.51h20.015M6.256 6.924V2m11.387 4.924V2" />
 </symbol>
 <symbol id="isvg-chevron-down" viewBox="0 0 24 24">
  <path d="m18 9-6 6-6-6" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-chevron-left" viewBox="0 0 24 24">
  <path d="m15 18-6-6 6-6" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-chevron-right" viewBox="0 0 24 24">
  <path d="m9 6 6 6-6 6" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-chevron-up" viewBox="0 0 24 24">
  <path d="m6 15 6-6 6 6" style="fill:none;stroke:currentColor;stroke-width:2px" />
 </symbol>
 <symbol id="isvg-close" viewBox="0 0 18 18">
  <path d="m2.1 2.1 13.6 13.6m-13.6 0L15.7 2" stroke="currentColor" stroke-width="2" fill="none" stroke-linecap="square" />
 </symbol>
 <symbol id="isvg-download" viewBox="0 0 24 24">
  <path d="M16.06 9.87 12 14.53 7.93 9.87M12 14V4M5 14.91V19h14v-4.09" style="fill:none;stroke:currentColor;stroke-width:2.4px" />
 </symbol>
 <symbol id="isvg-filled-circle-white-x">
  <circle cx="15" cy="15" r="15" style="fill:currentColor" />
  <path d="M20 10 10 20m10 0L10 10" style="stroke:#fff;stroke-linecap:round;stroke-width:2" />
 </symbol>
 <symbol id="isvg-flowright">
  <g transform="translate(0 -1)" fill="#626BDF" fill-rule="evenodd">
   <circle opacity=".339" cx="83" cy="604" r="4" />
   <circle opacity=".339" cx="163" cy="604" r="4" />
   <circle opacity=".339" cx="163" cy="644" r="4" />
   <circle opacity=".196" cx="83" cy="644" r="4" />
   <circle opacity=".142" cx="123" cy="644" r="4" />
   <circle opacity=".339" cx="123" cy="684" r="4" />
   <circle opacity=".339" cx="203" cy="604" r="4" />
   <circle opacity=".339" cx="83" cy="564" r="4" />
   <circle opacity=".339" cx="44" cy="564" r="4" />
   <circle opacity=".606" cx="83" cy="524" r="4" />
   <circle opacity=".154" cx="123" cy="564" r="4" />
   <circle opacity=".339" cx="163" cy="564" r="4" />
   <circle opacity=".339" cx="203" cy="564" r="4" />
   <circle opacity=".339" cx="123" cy="524" r="4" />
   <circle opacity=".467" cx="163" cy="524" r="4" />
   <circle opacity=".339" cx="123" cy="484" r="4" />
   <circle opacity=".339" cx="283" cy="164" r="4" />
   <circle opacity=".339" cx="403" cy="164" r="4" />
   <circle opacity=".339" cx="363" cy="204" r="4" />
   <circle opacity=".196" cx="283" cy="204" r="4" />
   <circle opacity=".142" cx="321" cy="204" r="4" />
   <circle opacity=".339" cx="323" cy="244" r="4" />
   <circle opacity=".339" cx="443" cy="164" r="4" />
   <circle opacity=".339" cx="283" cy="124" r="4" />
   <circle opacity=".339" cx="243" cy="124" r="4" />
   <circle opacity=".606" cx="281" cy="85" r="4" />
   <circle opacity=".154" cx="323" cy="125" r="4" />
   <circle opacity=".339" cx="403" cy="125" r="4" />
   <circle opacity=".339" cx="443" cy="125" r="4" />
   <circle opacity=".339" cx="323" cy="85" r="4" />
   <circle opacity=".467" cx="403" cy="85" r="4" />
   <circle opacity=".467" cx="403" cy="5" r="4" />
   <circle opacity=".339" cx="323" cy="45" r="4" />
   <circle opacity=".131" cx="443" cy="45" r="4" />
   <circle opacity=".165" cx="203" cy="164" r="4" />
   <circle opacity=".165" cx="243" cy="204" r="4" />
   <circle opacity=".339" cx="243" cy="364" r="4" />
   <circle opacity=".339" cx="203" cy="364" r="4" />
   <circle opacity=".339" cx="323" cy="364" r="4" />
   <circle opacity=".339" cx="323" cy="404" r="4" />
   <circle opacity=".196" cx="243" cy="404" r="4" />
   <circle opacity=".142" cx="283" cy="404" r="4" />
   <circle opacity=".339" cx="283" cy="444" r="4" />
   <circle opacity=".339" cx="363" cy="364" r="4" />
   <circle opacity=".339" cx="243" cy="324" r="4" />
   <circle opacity=".339" cx="203" cy="324" r="4" />
   <circle opacity=".339" cx="203" cy="444" r="4" />
   <circle opacity=".606" cx="243" cy="284" r="4" />
   <circle opacity=".154" cx="283" cy="324" r="4" />
   <circle opacity=".339" cx="323" cy="324" r="4" />
   <circle opacity=".339" cx="363" cy="324" r="4" />
   <circle opacity=".339" cx="283" cy="284" r="4" />
   <circle opacity=".467" cx="323" cy="284" r="4" />
   <circle opacity=".339" cx="283" cy="244" r="4" />
   <circle opacity=".131" cx="363" cy="244" r="4" />
   <circle opacity=".165" cx="163" cy="364" r="4" />
   <circle opacity=".131" cx="203" cy="484" r="4" />
   <circle opacity=".339" cx="163" cy="244" r="4" />
   <circle opacity=".339" cx="163" cy="284" r="4" />
   <circle opacity=".142" cx="123" cy="284" r="4" />
   <circle opacity=".339" cx="123" cy="324" r="4" />
   <circle opacity=".339" cx="203" cy="244" r="4" />
   <circle opacity=".339" cx="163" cy="204" r="4" />
   <circle opacity=".339" cx="203" cy="204" r="4" />
   <circle opacity=".467" cx="163" cy="164" r="4" />
   <circle opacity=".131" cx="203" cy="124" r="4" />
   <circle opacity=".165" cx="4" cy="604" r="4" />
  </g>
 </symbol>
 <symbol id="isvg-highlight">
  <path d="M2.632 40.594c2.79-5.244 5.025-11.32 6.708-18.228C10.845 16.186 11 1 11 1" stroke="#0075FF" stroke-width="4" fill="none" stroke-linejoin="round" />
 </symbol>
 <symbol id="isvg-icon-alert">
  <circle fill="#D01D2E" cx="15" cy="15" r="15" />
  <path fill="#fff" d="M14 8.625h2v9.75h-2z" />
  <circle fill="#FFF" cx="15" cy="21.5" r="1.5" />
 </symbol>
 <symbol id="isvg-play-btn-fill" viewBox="0 0 30 30">
  <g fill="none" fill-rule="evenodd">
   <circle fill="currentColor" cx="15" cy="15" r="15" />
   <path fill="#FFF" d="m21.085 15.425-9.34 6.226V9.198z" />
  </g>
 </symbol>
 <symbol id="isvg-play-btn" viewBox="0 0 30 30">
  <path d="m21.085 15.425-9.34 6.226V9.198z" fill="currentColor" fill-rule="evenodd" />
 </symbol>
 <symbol id="isvg-quote">
  <path d="M9.322 24v-7.492c0-2.737.348-5.157 1.045-7.26A31.742 31.742 0 0 1 13 3.345L7.65 0a21.05 21.05 0 0 0-3.01 3.429 27.74 27.74 0 0 0-2.425 4.148 24.588 24.588 0 0 0-1.63 4.508C.195 13.623 0 15.11 0 16.55V24h9.322zm14 0v-7.492c0-2.737.348-5.157 1.045-7.26A31.742 31.742 0 0 1 27 3.345L21.65 0a21.05 21.05 0 0 0-3.01 3.429 27.74 27.74 0 0 0-2.425 4.148 24.588 24.588 0 0 0-1.63 4.508C14.195 13.623 14 15.11 14 16.55V24h9.322z" />
 </symbol>
 <symbol id="isvg-resource-item-decoration">
  <g transform="translate(12 10)" fill="currentColor">
   <circle opacity=".392" cx="2.222" cy="2.219" r="2.2" />
   <circle opacity=".539" cx="25" cy="2.219" r="2.2" />
   <circle opacity=".213" cx="47.771" cy="2.219" r="2.2" />
   <circle opacity=".539" cx="2.222" cy="24.406" r="2.2" />
   <circle opacity=".539" cx="25" cy="24.406" r="2.2" />
   <circle opacity=".213" cx="47.771" cy="24.406" r="2.2" />
   <circle opacity=".539" cx="2.222" cy="46.594" r="2.2" />
   <circle opacity=".539" cx="25" cy="46.594" r="2.2" />
   <circle opacity=".539" cx="25" cy="68.781" r="2.2" />
  </g>
 </symbol>
 <symbol id="isvg-search" viewBox="0 0 17 18">
  <g stroke="currentColor" stroke-width="2" fill="none" fill-rule="evenodd">
   <path d="M3.1 3.4a6.5 6.5 0 0 1 9.2 9.2h-.01a6.5 6.5 0 0 1-9.2-9.2z" />
   <path stroke-linecap="square" d="m12.94 13.25 2.63 2.63" />
  </g>
 </symbol>
 <symbol id="isvg-stroke-circle-white-x" viewBox="0 0 73 74">
  <g transform="translate(0 .2)" fill="none" fill-rule="evenodd">
   <circle stroke="url(#linearGradient-1)" stroke-width="2" cx="36.5" cy="36.5" r="35.5" />
   <path d="M46.709 27 25.974 48.684m21.21-.475L25.5 27.474" stroke="#FFF" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.5" />
  </g>
 </symbol>
 <symbol id="isvg-stroke-circle-x">
  <circle cx="15" cy="15" r="14.25" style="stroke-width:1;fill:none;stroke:currentColor" />
  <path d="M20 10 10 20m10 0L10 10" style="stroke-linecap:round;stroke-width:2;stroke:currentColor" />
 </symbol>
 <symbol id="isvg-varonis-logo">
  <path fill="currentColor" d="M87.26 15.94a3.37 3.37 0 0 1-3.69 3.66h-.9A3.37 3.37 0 0 1 79 15.94a3.37 3.37 0 0 1 3.68-3.65h.9a3.38 3.38 0 0 1 3.68 3.65zm-3.55-6h-1.19a5.69 5.69 0 0 0-6.07 6A5.69 5.69 0 0 0 82.52 22h1.19a5.69 5.69 0 0 0 6.07-6.06 5.69 5.69 0 0 0-6.07-6zm25.89 0a1.17 1.17 0 0 0-1.26 1.26v9.59A1.17 1.17 0 0 0 109.6 22a1.19 1.19 0 0 0 1.26-1.26v-9.59a1.19 1.19 0 0 0-1.26-1.26m-63.48 2a1.19 1.19 0 0 0-.33-1.75 1.18 1.18 0 0 0-1.76.32l-5.39 8-5.41-8a1.17 1.17 0 0 0-1.74-.33 1.19 1.19 0 0 0-.34 1.76s6.43 9.52 6.53 9.62a1.21 1.21 0 0 0 1.92 0c.09-.09 6.52-9.61 6.52-9.61m76.25 2.85h-4.44a1.12 1.12 0 0 1-1.24-1.23 1.11 1.11 0 0 1 1.24-1.23h6.51a1.13 1.13 0 0 0 1.19-1.2 1.13 1.13 0 0 0-1.19-1.2h-6.65a3.4 3.4 0 0 0-3.63 3.63 3.39 3.39 0 0 0 3.63 3.62h4.44a1.12 1.12 0 0 1 1.24 1.23 1.11 1.11 0 0 1-1.24 1.23h-6.87a1.14 1.14 0 0 0-1.2 1.2 1.12 1.12 0 0 0 1.2 1.2h7a3.4 3.4 0 0 0 3.64-3.63 3.39 3.39 0 0 0-3.63-3.62m-58-2.46h5.53a1.4 1.4 0 0 1 1.41 1.56 1.42 1.42 0 0 1-1.21 1.56h-5.72zm-2.52-1.14v9.59a1.26 1.26 0 1 0 2.52 0v-2.89h4.9l2.46 3.64a1.08 1.08 0 0 0 .88.51h.12a1.11 1.11 0 0 0 1-1.32 1 1 0 0 0-.21-.51l-1.78-2.63a3.52 3.52 0 0 0 2-3.45v-.21a.17.17 0 0 0 0-.07v-.17c0-2.27-1.36-3.74-3.46-3.74h-7.15a1.17 1.17 0 0 0-1.27 1.26zm-12.54 6.17 2.63-3.88 2.62 3.88zM59.42 20S53 10.46 52.9 10.36a1.14 1.14 0 0 0-1-.47 1.16 1.16 0 0 0-1 .48c-.09.09-6.51 9.61-6.51 9.61a1.18 1.18 0 0 0 .33 1.75 1.16 1.16 0 0 0 1.75-.32l1.32-2H56l1.33 2a1.17 1.17 0 0 0 1.74.33 1.19 1.19 0 0 0 .35-1.74zM104 22a1.14 1.14 0 0 1-1.24-1.25v-4.92a3.33 3.33 0 0 0-3.59-3.57h-.9a3.33 3.33 0 0 0-3.59 3.57v4.92A1.14 1.14 0 0 1 93.39 22a1.16 1.16 0 0 1-1.26-1.25v-4.92a5.57 5.57 0 0 1 6-5.94h1.18a5.58 5.58 0 0 1 6 5.94v4.92A1.17 1.17 0 0 1 104 22" />
  <path fill="#4a90e2" d="m26.64 18.93-6.13-9-2.32 3.37 5.28 7.8a1.77 1.77 0 0 0 2.67.49 1.8 1.8 0 0 0 .5-2.66m-12 2.17a1.76 1.76 0 0 0 2.66.49 1.79 1.79 0 0 0 .5-2.66l-1.69-2.5-2.32 3.42.85 1.25" />
  <path fill="#d21a27" d="M14.51 1H9.87l8.32 12.3 2.32-3.42-6-8.88M1 1l12.75 18.85 2.32-3.42L5.64 1H1" />
 </symbol>
 <symbol id="isvg-workflow-with-icons-frame">
  <circle cx="37" cy="37" r="35.5" fill="none" stroke="url(#isvg-workflow-with-icons-frame__grad)" stroke-width="2" />
 </symbol>
 <symbol id="isvg-x">
  <path d="M20 10 10 20m10 0L10 10" style="stroke-linecap:round;stroke-width:1.5;stroke:currentColor" />
 </symbol>
 <symbol id="logo-amzs3" viewBox="0 0 120 120">
  <g fill="none" fill-rule="evenodd">
   <path d="M.5-239v360" stroke="currentColor" stroke-linecap="square" />
   <path d="M35.198 64.84c0-1.126-.413-1.906-1.698-1.906-1.131 0-1.804.6-1.804 1.741 0 3.018 5.161 1.216 5.161 5.135 0 2.477-1.85 3.19-3.395 3.19-2.554 0-3.303-1.291-3.303-3.566h1.338c0 1.201.076 2.493 2.05 2.493a1.857 1.857 0 0 0 1.37-.539c.36-.359.55-.85.525-1.353 0-3.033-5.16-1.276-5.16-5.21 0-.99.427-2.957 3.195-2.957 2.08 0 3.028 1.02 3.059 2.987l-1.338-.015zm5.26 1.952h.673c1.147 0 1.652-.81 1.652-1.877 0-.976-.367-1.771-1.407-1.771-1.422 0-1.56 1.29-1.56 2.064h-1.338c0-1.817.872-3.063 2.867-3.063 2.264 0 2.784 1.577 2.784 2.763 0 1.066-.551 2.012-1.683 2.282v.03c1.224.24 2.004 1.006 2.004 2.477 0 1.937-.994 3.288-3.074 3.288-2.906 0-3.074-2.492-3.074-2.958v-.135h1.338c0 .976.49 2.102 1.72 2.102.796 0 1.721-.39 1.721-2.192 0-1.246-.612-2.027-1.957-2.027h-.689l.023-.983zm-5.985-18.789c-1.766 0-3.718.672-4.144 2.867a.305.305 0 0 0 .043.238c.046.07.12.12.204.136h.03l1.812.214a.397.397 0 0 0 .29-.376 1.414 1.414 0 0 1 1.5-1.113c.403-.017.79.16 1.036.473a2.4 2.4 0 0 1 .242 1.353v.26a12.784 12.784 0 0 0-3.505.64 3.187 3.187 0 0 0-1.979 3.053c0 1.948 1.239 2.918 2.776 2.918a3.66 3.66 0 0 0 3.072-1.353c.268.463.62.874 1.036 1.216a.388.388 0 0 0 .436-.05c.382-.337 1.036-.939 1.424-1.256a.356.356 0 0 0 0-.509 2.548 2.548 0 0 1-.715-1.73v-2.826c0-1.216.103-2.374-.797-3.23a4.193 4.193 0 0 0-2.76-.925zm24.344 0c-1.766 0-3.718.672-4.144 2.867a.305.305 0 0 0 .039.237c.045.07.117.12.2.139h.03l1.822.21c.18-.04.31-.194.315-.376a1.414 1.414 0 0 1 1.497-1.112c.403-.018.79.159 1.036.473.2.422.274.892.21 1.354v.26c-1.185.05-2.357.265-3.48.64a3.187 3.187 0 0 0-1.979 3.053c0 1.948 1.239 2.918 2.776 2.918a3.66 3.66 0 0 0 3.066-1.353c.268.463.619.875 1.036 1.216a.388.388 0 0 0 .436-.05c.382-.337 1.036-.939 1.424-1.256a.37.37 0 0 0 0-.509 2.548 2.548 0 0 1-.7-1.728v-2.828c0-1.216.082-2.374-.818-3.23a4.141 4.141 0 0 0-2.766-.925zm-13.694.095a2.48 2.48 0 0 0-2.445 1.77v-1.252a.364.364 0 0 0-.343-.336h-1.72a.364.364 0 0 0-.357.351v9.605a.379.379 0 0 0 .342.336h1.86a.364.364 0 0 0 .357-.35v-5.085c0-1.113-.057-2.627 1.279-2.627 1.336 0 1.134 1.567 1.134 2.627v5.086a.378.378 0 0 0 .342.351h1.86a.364.364 0 0 0 .357-.35v-5.087a5.736 5.736 0 0 1 .166-1.826c.162-.46.587-.783 1.082-.818a.966.966 0 0 1 1.082.818c.062.607.08 1.217.052 1.826v5.086a.378.378 0 0 0 .342.351h1.854a.364.364 0 0 0 .358-.35v-6.098c0-1.017.103-2.202-.482-3.016a2.735 2.735 0 0 0-2.555-.965 2.697 2.697 0 0 0-2.107 1.716c-.574-1.2-1.3-1.755-2.46-1.755l.002-.008zm31.63 0c-2.676 0-4.18 2.32-4.18 5.31 0 2.99 1.475 5.36 4.18 5.36 2.59 0 4.247-2.335 4.247-5.269 0-3.02-1.506-5.4-4.283-5.4h.036zm10.607 0c-1.284 0-2.015.61-2.538 1.943v-1.464a.356.356 0 0 0-.34-.259H82.76a.35.35 0 0 0-.358.31v9.595a.378.378 0 0 0 .343.351h1.86a.364.364 0 0 0 .357-.35v-5.167a4.366 4.366 0 0 1 .315-1.826 1.187 1.187 0 0 1 1-.774c1.285 0 1.16 1.526 1.16 2.583v5.217c.025.17.168.3.343.31h1.862a.365.365 0 0 0 .357-.31v-6.034c0-.938 0-2.222-.482-2.99a2.451 2.451 0 0 0-2.17-1.138l.012.003zm-22.329.164a.34.34 0 0 0-.342.336v1.377a.338.338 0 0 0 .321.351h3.206l-3.632 5.283a1.725 1.725 0 0 0-.258.938v1.398a.313.313 0 0 0 .132.271.326.326 0 0 0 .304.039 6.975 6.975 0 0 1 6.447 0c.105.042.225.03.318-.033a.329.329 0 0 0 .147-.279v-1.445a.61.61 0 0 0-.342-.508 6.73 6.73 0 0 0-3.481-.771l3.165-4.578c.228-.24.388-.535.467-.854v-1.17a.338.338 0 0 0-.321-.352h-6.117l-.014-.003zm11.716 1.826a1.182 1.182 0 0 1 1.235.925c.21.831.299 1.687.264 2.543 0 1.216-.063 3.269-1.497 3.269-1.434 0-1.443-2.543-1.443-3.705 0-1.161.063-3.051 1.409-3.051l.032.019zm-41.29 3.483v.401a3.711 3.711 0 0 1-.341 1.984 1.503 1.503 0 0 1-1.28.854c-.714 0-1.133-.563-1.133-1.378-.02-1.576 1.424-1.856 2.76-1.856l-.005-.005zm24.344 0v.401a3.708 3.708 0 0 1-.342 1.993 1.497 1.497 0 0 1-1.279.854c-.715 0-1.133-.563-1.133-1.377 0-1.592 1.409-1.877 2.745-1.877l.01.006z" fill="currentColor" fill-rule="nonzero" />
  </g>
 </symbol>
 <symbol id="logo-aws" viewBox="0 0 120 120">
  <g fill="none" fill-rule="evenodd">
   <path d="M-479 .5h719" stroke="currentColor" stroke-linecap="square" />
   <g fill="currentColor">
    <path d="M50.681 58.806c0 .556.06 1.006.165 1.336.12.33.27.691.479 1.082.075.12.105.24.105.345 0 .15-.09.3-.285.45l-.942.631a.716.716 0 0 1-.39.135c-.15 0-.299-.075-.449-.21a4.644 4.644 0 0 1-.538-.706c-.15-.255-.3-.54-.464-.886-1.168 1.382-2.634 2.073-4.4 2.073-1.258 0-2.26-.36-2.994-1.082-.733-.72-1.107-1.681-1.107-2.883 0-1.276.449-2.312 1.362-3.093.913-.781 2.125-1.172 3.666-1.172.51 0 1.033.046 1.587.12.554.076 1.122.196 1.721.331v-1.096c0-1.142-.24-1.937-.703-2.403-.48-.465-1.288-.69-2.44-.69-.524 0-1.063.06-1.616.195-.554.135-1.093.3-1.617.51-.24.105-.419.165-.524.195a.915.915 0 0 1-.239.045c-.21 0-.314-.15-.314-.465v-.736c0-.24.03-.42.104-.526.075-.105.21-.21.42-.315.523-.27 1.152-.495 1.885-.676a9.045 9.045 0 0 1 2.335-.285c1.781 0 3.083.405 3.921 1.216.823.811 1.243 2.043 1.243 3.694v4.866h.03zm-6.076 2.282c.494 0 1.003-.09 1.542-.27a3.335 3.335 0 0 0 1.421-.96c.24-.286.42-.602.51-.962.09-.36.149-.796.149-1.306v-.631a12.461 12.461 0 0 0-1.377-.255 11.24 11.24 0 0 0-1.407-.09c-1.003 0-1.736.195-2.23.6-.494.406-.733.976-.733 1.727 0 .706.18 1.231.554 1.592.359.375.883.555 1.571.555zm12.018 1.622c-.27 0-.449-.045-.569-.15-.12-.09-.224-.3-.314-.586l-3.517-11.607c-.09-.3-.135-.496-.135-.601 0-.24.12-.376.36-.376h1.466c.285 0 .48.045.584.15.12.09.21.3.3.586l2.514 9.941 2.334-9.94c.075-.301.165-.496.285-.586.12-.09.329-.15.598-.15h1.198c.284 0 .479.044.598.15.12.09.225.3.285.585l2.364 10.061 2.59-10.06c.09-.301.194-.496.299-.586.12-.09.314-.15.584-.15h1.392c.24 0 .374.12.374.375 0 .075-.015.15-.03.24s-.045.21-.105.376l-3.607 11.607c-.09.3-.194.496-.314.586-.12.09-.314.15-.569.15h-1.287c-.284 0-.479-.045-.599-.15s-.224-.3-.284-.6l-2.32-9.686-2.305 9.67c-.075.3-.164.496-.284.601-.12.105-.33.15-.599.15h-1.287zm19.232.406a9.89 9.89 0 0 1-2.305-.27c-.748-.18-1.332-.376-1.72-.601-.24-.135-.405-.286-.465-.42a1.063 1.063 0 0 1-.09-.421v-.766c0-.315.12-.466.345-.466.09 0 .18.015.269.045.09.03.225.09.374.15a8.121 8.121 0 0 0 1.646.526 8.96 8.96 0 0 0 1.782.18c.942 0 1.676-.165 2.185-.495.508-.33.778-.811.778-1.427 0-.42-.135-.766-.404-1.05-.27-.286-.778-.541-1.512-.782l-2.17-.676c-1.093-.345-1.9-.855-2.395-1.531-.494-.66-.748-1.397-.748-2.178 0-.63.135-1.186.404-1.666a3.87 3.87 0 0 1 1.078-1.232 4.75 4.75 0 0 1 1.556-.78A6.503 6.503 0 0 1 76.35 49c.33 0 .674.015 1.003.06.344.045.658.105.973.165.299.075.583.15.853.24s.479.18.628.27c.21.121.36.241.45.376.09.12.134.286.134.496v.706c0 .315-.12.48-.344.48-.12 0-.315-.06-.569-.18-.853-.39-1.81-.586-2.874-.586-.853 0-1.526.135-1.99.42-.464.286-.704.722-.704 1.337 0 .42.15.781.45 1.066.299.286.853.571 1.646.826l2.125.676c1.078.345 1.856.826 2.32 1.442.464.615.688 1.321.688 2.102 0 .646-.134 1.231-.389 1.742a4.04 4.04 0 0 1-1.092 1.321c-.464.376-1.018.646-1.662.841a7.095 7.095 0 0 1-2.14.316z" fill-rule="nonzero" />
    <path d="M78.684 70.414C73.76 74.063 66.606 76 60.454 76c-8.62 0-16.388-3.199-22.255-8.514-.464-.42-.045-.992.51-.661 6.345 3.694 14.173 5.931 22.27 5.931 5.462 0 11.464-1.14 16.986-3.483.824-.376 1.527.54.719 1.14z" />
    <path d="M80.734 68.071c-.628-.81-4.16-.39-5.762-.195-.479.06-.554-.36-.12-.676 2.814-1.982 7.439-1.411 7.978-.75.538.675-.15 5.315-2.784 7.538-.404.345-.793.165-.614-.286.599-1.486 1.93-4.835 1.302-5.63z" />
   </g>
  </g>
 </symbol>
 <symbol id="logo-box" viewBox="0 0 120 120">
  <g fill="none" fill-rule="evenodd">
   <path d="M-359 .5h719" stroke="currentColor" stroke-linecap="square" />
   <path d="M79.432 69.267c.494.703.395 1.606-.198 2.108-.691.501-1.679.401-2.173-.201l-3.457-4.516-3.358 4.416c-.494.702-1.481.702-2.173.2-.691-.501-.79-1.405-.296-2.107l3.95-5.218-3.95-5.218c-.494-.703-.297-1.706.296-2.208.692-.502 1.68-.301 2.173.3l3.358 4.517 3.457-4.315c.494-.703 1.383-.803 2.173-.301.692.501.692 1.505.198 2.207L75.58 64.05l3.852 5.218zm-17.977-.602c-2.568 0-4.642-2.007-4.642-4.616 0-2.509 2.074-4.616 4.642-4.616 2.568 0 4.643 2.107 4.643 4.616-.1 2.61-2.173 4.616-4.643 4.616zm-13.63 0c-2.568 0-4.643-2.007-4.643-4.616 0-2.509 2.075-4.616 4.643-4.616 2.568 0 4.642 2.107 4.642 4.616 0 2.61-2.074 4.616-4.642 4.616zm13.63-12.243a7.63 7.63 0 0 0-6.716 4.014c-1.284-2.408-3.852-4.014-6.816-4.014-1.777 0-3.358.603-4.642 1.506v-6.423c0-.803-.691-1.505-1.481-1.505-.89 0-1.58.702-1.58 1.505V64.15c.098 4.215 3.456 7.527 7.605 7.527 2.963 0 5.531-1.706 6.815-4.115 1.284 2.409 3.852 4.115 6.717 4.115a7.69 7.69 0 0 0 7.704-7.727c.099-4.115-3.358-7.527-7.606-7.527z" fill="currentColor" fill-rule="nonzero" />
  </g>
 </symbol>
 <symbol id="logo-facebook" viewBox="0 0 167.657 167.657">
  <path d="M83.829.349C37.532.349 0 37.881 0 84.178c0 41.523 30.222 75.911 69.848 82.57v-65.081H49.626v-23.42h20.222V60.978c0-20.037 12.238-30.956 30.115-30.956 8.562 0 15.92.638 18.056.919v20.944l-12.399.006c-9.72 0-11.594 4.618-11.594 11.397v14.947h23.193l-3.025 23.42H94.026v65.653c41.476-5.048 73.631-40.312 73.631-83.154 0-46.273-37.532-83.805-83.828-83.805z" fill="currentColor" />
 </symbol>
 <symbol id="logo-gdrive" viewBox="0 0 120 120">
  <g fill="none" fill-rule="evenodd">
   <path d="M-119 .5h719" stroke="currentColor" stroke-linecap="square" />
   <path d="M57.2 63.857 49.95 76h22.802L80 63.857H57.2zm21.77-2.428L67.36 42H52.848l11.608 19.429H78.97zm-27.575-17L40 63.508l7.258 12.142 11.395-19.078-7.258-12.143z" fill="currentColor" />
  </g>
 </symbol>
 <symbol id="logo-github" viewBox="0 0 120 120">
  <g fill="none" fill-rule="evenodd">
   <path d="M-599 .5h719" stroke="currentColor" stroke-linecap="square" />
   <path d="M41.556 61.848h-5.042a.234.234 0 0 0-.235.233v2.43c0 .129.105.233.235.233h1.967v3.02s-.441.148-1.662.148c-1.44 0-3.453-.519-3.453-4.882 0-4.364 2.095-4.938 4.062-4.938 1.703 0 2.437.295 2.904.438.146.044.282-.1.282-.228l.562-2.349c0-.06-.02-.132-.09-.181-.19-.134-1.346-.772-4.267-.772C33.453 55 30 56.412 30 63.2c0 6.788 3.953 7.8 7.284 7.8 2.758 0 4.431-1.162 4.431-1.162.07-.038.077-.133.077-.176V62.08a.234.234 0 0 0-.236-.233m25.984-6.034a.233.233 0 0 0-.234-.233h-2.839a.234.234 0 0 0-.235.233v5.41h-4.424v-5.41a.234.234 0 0 0-.234-.233h-2.84a.234.234 0 0 0-.234.233v14.649c0 .129.106.234.235.234h2.839c.13 0 .234-.105.234-.234v-6.266h4.425l-.008 6.266c0 .129.106.234.235.234h2.846c.13 0 .234-.105.234-.234V55.813zm-20.627 1.923c0-1.008-.82-1.823-1.83-1.823-1.01 0-1.83.815-1.83 1.823 0 1.007.82 1.823 1.83 1.823 1.01 0 1.83-.816 1.83-1.823m-.203 9.636V60.61a.234.234 0 0 0-.235-.233h-2.83c-.13 0-.245.132-.245.26v9.688c0 .284.18.37.412.37h2.55c.28 0 .348-.136.348-.375v-2.948zm31.62-6.973h-2.818a.234.234 0 0 0-.234.234v7.182s-.716.517-1.732.517-1.285-.455-1.285-1.435v-6.264a.234.234 0 0 0-.234-.234h-2.86a.235.235 0 0 0-.234.234v6.738c0 2.913 1.646 3.626 3.911 3.626 1.859 0 3.357-1.013 3.357-1.013s.071.534.104.597a.248.248 0 0 0 .207.127l1.819-.008a.235.235 0 0 0 .234-.234v-9.833a.235.235 0 0 0-.236-.234m6.589 7.924a3.412 3.412 0 0 1-1.64-.467v-4.638s.654-.396 1.456-.466c1.015-.09 1.992.212 1.992 2.599 0 2.516-.441 3.013-1.808 2.972m1.111-8.253c-1.6 0-2.688.704-2.688.704v-4.96a.234.234 0 0 0-.234-.234h-2.848a.234.234 0 0 0-.234.233v14.649c0 .13.105.234.235.234h1.975c.09 0 .156-.045.206-.124.05-.079.12-.676.12-.676s1.164 1.088 3.368 1.088c2.587 0 4.071-1.294 4.071-5.81 0-4.514-2.37-5.104-3.971-5.104m-31.159.305h-2.13l-.003-2.774c0-.105-.055-.157-.178-.157h-2.902c-.113 0-.174.049-.174.156v2.866s-1.454.346-1.552.375a.233.233 0 0 0-.17.223v1.801c0 .13.105.234.235.234h1.487v4.334c0 3.219 2.29 3.535 3.836 3.535.705 0 1.55-.223 1.69-.274.084-.03.133-.117.133-.21l.002-1.982c0-.13-.11-.234-.235-.234-.124 0-.442.05-.769.05-1.046 0-1.4-.48-1.4-1.1v-4.119h2.13c.13 0 .235-.104.235-.234V60.61a.234.234 0 0 0-.235-.234" fill="currentColor" />
  </g>
 </symbol>
 <symbol id="logo-jira" viewBox="0 0 120 120">
  <g fill="currentColor">
   <path d="M84.396 56.77c1.957 0 3.485.876 4.28 2.598v-2.327H91v13.297h-2.324V67.95c-.856 1.753-2.476 2.66-4.555 2.66-3.577 0-5.381-2.992-5.381-6.92 0-3.748 1.896-6.92 5.656-6.92zm-22.655-3.9v12.15c0 3.202-1.437 5.439-4.77 5.439-1.253 0-2.232-.212-2.904-.454V67.68c.734.302 1.62.453 2.507.453 2.048 0 2.752-1.209 2.752-2.962v-12.3h2.415zm5.564 4.171v13.297h-2.323V57.04h2.323zm10.518-.211v2.236c-2.966-.302-4.77.574-4.77 3.415v7.857h-2.262V57.04h2.262v2.327c.795-1.571 2.14-2.69 4.77-2.538zm7.154 2.085c-2.599 0-3.944 1.692-3.944 4.774.03 3.204 1.315 4.805 3.7 4.805 2.078 0 3.913-1.299 3.913-4.26v-1.058c0-2.962-1.682-4.261-3.669-4.261zm-18.803-6.981c.948 0 1.62.574 1.62 1.602 0 .997-.672 1.601-1.62 1.601-.948 0-1.62-.574-1.62-1.601 0-.998.672-1.602 1.62-1.602zM47.34 50H36.763c0 2.599 2.14 4.714 4.77 4.714h1.956v1.844c0 2.599 2.14 4.714 4.77 4.714V50.907A.896.896 0 0 0 47.34 50z" />
   <path d="M41.96 55.349H31.38c0 2.599 2.14 4.714 4.77 4.714h1.956v1.844c0 2.598 2.14 4.714 4.77 4.714V56.255a.915.915 0 0 0-.918-.906z" />
   <path d="M36.579 60.728H26c0 2.599 2.14 4.714 4.77 4.714h1.956v1.844c0 2.599 2.14 4.714 4.77 4.714V61.635a.915.915 0 0 0-.917-.907z" />
  </g>
 </symbol>
 <symbol id="logo-linkedin" viewBox="0 0 510 510">
  <path d="M459 0H51C22.95 0 0 22.95 0 51v408c0 28.05 22.95 51 51 51h408c28.05 0 51-22.95 51-51V51c0-28.05-22.95-51-51-51zM153 433.5H76.5V204H153v229.5zm-38.25-272.85c-25.5 0-45.9-20.4-45.9-45.9s20.4-45.9 45.9-45.9 45.9 20.4 45.9 45.9-20.4 45.9-45.9 45.9zM433.5 433.5H357V298.35c0-20.399-17.85-38.25-38.25-38.25s-38.25 17.851-38.25 38.25V433.5H204V204h76.5v30.6c12.75-20.4 40.8-35.7 63.75-35.7 48.45 0 89.25 40.8 89.25 89.25V433.5z" fill="currentColor" />
 </symbol>
 <symbol id="logo-okta" viewBox="0 0 120 120">
  <path d="M91.732 67.681c-2.279 0-2.632-.83-2.632-3.943v-7.513c0-.26-.193-.7-.706-.7h-2.696c-.338 0-.707.276-.707.7v.342a7.877 7.877 0 0 0-3.98-1.075c-4.462 0-8.073 3.667-8.073 8.197 0 4.53 3.611 8.197 8.073 8.197 2.006 0 3.836-.75 5.248-1.972.755 1.173 1.974 1.956 3.884 1.972.321 0 2.055.065 2.055-.766v-2.917c0-.244-.193-.522-.466-.522zm-10.705.13c-2.23 0-4.044-1.84-4.044-4.106 0-2.265 1.813-4.106 4.044-4.106s4.045 1.841 4.045 4.106c-.016 2.265-1.83 4.107-4.045 4.107zM36.073 55.508c-4.462 0-8.073 3.667-8.073 8.197 0 4.53 3.611 8.197 8.073 8.197s8.073-3.666 8.073-8.197c0-4.53-3.611-8.197-8.073-8.197zm0 12.304c-2.231 0-4.045-1.842-4.045-4.107s1.814-4.106 4.045-4.106c2.23 0 4.044 1.841 4.044 4.106 0 2.265-1.813 4.107-4.044 4.107zM50.26 66.46a.71.71 0 0 1 1.22-.506c2.022 2.086 5.36 5.671 5.377 5.687.048.05.096.13.289.196.08.033.208.033.353.033h3.643c.658 0 .85-.766.546-1.157l-6.035-6.274-.32-.326c-.691-.832-.61-1.157.176-2.005l4.782-5.427c.305-.39.113-1.14-.561-1.14h-3.307c-.128 0-.224 0-.32.032-.193.066-.273.13-.322.196-.016.016-2.664 2.917-4.3 4.693-.45.49-1.253.163-1.253-.505v-9.305c0-.473-.385-.652-.69-.652h-2.696c-.465 0-.69.31-.69.587v20.63c0 .473.385.604.706.604h2.696c.418 0 .69-.31.69-.62V66.46h.016zm22.02 4.66-.289-2.738a.642.642 0 0 0-.754-.57 4.05 4.05 0 0 1-.626.049c-2.15 0-3.9-1.711-4.028-3.879v-3.585c0-.44.32-.798.754-.798h3.611a.68.68 0 0 0 .642-.701v-2.591c0-.506-.32-.766-.61-.766h-3.643a.756.756 0 0 1-.77-.734v-4.155a.657.657 0 0 0-.69-.652h-2.68c-.338 0-.659.212-.659.636v13.346c.113 4.433 3.692 7.97 8.073 7.97.37 0 .722-.033 1.075-.082a.664.664 0 0 0 .594-.75z" fill="currentColor" />
 </symbol>
 <symbol id="logo-salesforce" viewBox="0 0 120 120">
  <g fill="none" fill-rule="evenodd">
   <path d="M-239 .5h719" stroke="currentColor" stroke-linecap="square" />
   <path d="M47.394 40c3.464 0 6.542 1.668 8.494 4.254 1.774-1.873 4.243-3.034 6.974-3.034 3.63 0 6.798 2.05 8.485 5.096a11.598 11.598 0 0 1 4.796-1.033C82.69 45.283 88 50.708 88 57.4c0 6.692-5.309 12.118-11.857 12.118a11.62 11.62 0 0 1-2.336-.236c-1.485 2.684-4.316 4.498-7.565 4.498a8.535 8.535 0 0 1-3.792-.884C60.944 76.484 57.436 79 53.347 79c-4.258 0-7.887-2.73-9.28-6.558a8.96 8.96 0 0 1-1.887.2c-5.07 0-9.18-4.207-9.18-9.397 0-3.478 1.847-6.515 4.59-8.14a10.878 10.878 0 0 1-.879-4.298C36.711 44.838 41.494 40 47.394 40zM65.03 53.617c-.577 0-1.031.165-1.35.49-.317.324-.533.817-.64 1.466l-.04.218h-.734a.107.107 0 0 0-.096.093l-.119.673v.035c.005.043.036.069.104.069h.704l-.714 4.041-.035.189a4.46 4.46 0 0 1-.157.607c-.07.2-.138.35-.222.46a.594.594 0 0 1-.292.228 1.178 1.178 0 0 1-.63.025.748.748 0 0 1-.173-.055s-.082-.032-.115.051a6.296 6.296 0 0 0-.017.046l-.063.175-.156.436c-.022.064.009.114.049.129.094.033.164.055.291.086.177.043.327.045.467.045.293 0 .561-.042.783-.123.222-.082.417-.224.59-.416a2.14 2.14 0 0 0 .413-.723 6.2 6.2 0 0 0 .28-1.084l.719-4.117h1.059a.107.107 0 0 0 .097-.095l.12-.671v-.036c-.006-.043-.037-.068-.105-.068h-1.02l.004-.02c.013-.084.061-.405.165-.709a.954.954 0 0 1 .223-.344.668.668 0 0 1 .268-.169c.1-.033.216-.049.342-.049a1.334 1.334 0 0 1 .425.067c.104.032.118 0 .138-.05l.244-.678.006-.039c-.004-.045-.047-.067-.065-.074a2.467 2.467 0 0 0-.748-.11zm-22.063 2.06h-.113l-.16.005c-.947.062-1.594.675-1.594 1.533v.019l.008.162c.086.829.831 1.115 1.533 1.318l.12.037.133.042c.484.153.877.305.877.66v.019l-.006.087c-.046.31-.339.53-.788.53a2.64 2.64 0 0 1-1.454-.423c-.079-.047-.125-.081-.186-.119-.032-.02-.113-.056-.148.052l-.223.625-.012.047c-.005.052.027.067.036.08.103.076.208.13.314.192.56.301 1.09.39 1.645.39 1.128 0 1.828-.609 1.828-1.587v-.02l-.008-.153c-.085-.79-.826-1.094-1.524-1.317l-.235-.077c-.498-.167-.904-.329-.904-.67v-.02l.007-.085c.046-.275.315-.47.713-.47a3.22 3.22 0 0 1 1.433.372s.11.071.15-.036c.021-.057.21-.57.229-.625.02-.06-.017-.105-.055-.129a3.168 3.168 0 0 0-1.616-.44zm16.516 0h-.113l-.16.005c-.946.062-1.593.675-1.593 1.533v.019l.008.162c.085.829.83 1.115 1.532 1.318l.12.037.134.042c.484.153.877.305.877.66v.019l-.006.087c-.046.31-.34.53-.789.53a2.64 2.64 0 0 1-1.453-.423c-.08-.047-.126-.08-.186-.119-.02-.013-.116-.05-.149.052l-.222.625-.012.047c-.005.052.026.067.035.08.104.076.209.13.314.192.561.301 1.091.39 1.645.39 1.128 0 1.829-.609 1.829-1.587v-.02l-.009-.153c-.084-.79-.826-1.094-1.524-1.317l-.234-.077c-.499-.167-.904-.329-.904-.67v-.02l.006-.085c.046-.275.315-.47.713-.47a3.22 3.22 0 0 1 1.434.372s.109.071.148-.036l.23-.625c.021-.06-.016-.105-.055-.129a3.168 3.168 0 0 0-1.616-.44zm20.842.015c-.398 0-.76.067-1.052.207-.294.14-.54.33-.734.567-.194.237-.34.519-.432.838a3.67 3.67 0 0 0-.14 1.031c0 .373.048.72.145 1.032.097.314.252.59.462.82.21.231.479.412.802.538.32.126.71.19 1.157.19.92-.003 1.405-.211 1.605-.323.035-.02.07-.055.027-.155l-.209-.591-.024-.04c-.039-.037-.096-.016-.096-.016-.228.086-.552.24-1.308.238-.494 0-.861-.148-1.09-.379-.236-.236-.352-.584-.372-1.075l3.188.004c.03-.004.085-.019.092-.085.004-.034.11-.663-.094-1.391a2.013 2.013 0 0 0-.409-.756c-.205-.223-.405-.38-.604-.467a2.305 2.305 0 0 0-.914-.187zm-25.53 0c-.398 0-.76.067-1.053.207-.294.14-.54.33-.734.567-.194.237-.34.519-.432.838-.092.319-.14.666-.14 1.031 0 .373.048.72.145 1.032.097.314.252.59.462.82.21.231.479.412.802.538.32.126.71.19 1.157.19.92-.003 1.405-.211 1.605-.323.035-.02.07-.055.027-.155l-.208-.591-.025-.04c-.039-.037-.095-.016-.095-.016-.228.086-.552.24-1.31.238-.493 0-.86-.148-1.09-.379-.235-.236-.35-.584-.37-1.075l3.187.004c.03-.004.086-.019.093-.085.003-.034.11-.663-.096-1.391a2.012 2.012 0 0 0-.407-.756c-.206-.223-.406-.38-.605-.467a2.305 2.305 0 0 0-.914-.187zm12.744 0c-.382 0-.722.068-1.01.204a2.086 2.086 0 0 0-.724.557 2.345 2.345 0 0 0-.428.829 3.67 3.67 0 0 0-.138 1.026c0 .365.046.71.138 1.025.093.316.236.595.429.829.192.233.436.42.723.552.288.133.628.2 1.01.2s.72-.067 1.01-.2c.287-.132.53-.32.722-.552.192-.233.336-.512.429-.829a3.66 3.66 0 0 0 .138-1.025c0-.366-.046-.71-.138-1.026a2.307 2.307 0 0 0-.429-.829 2.075 2.075 0 0 0-.723-.557 2.353 2.353 0 0 0-1.009-.205zm-20.042-.006c-.24 0-.624.034-.854.08 0 0-.697.137-.984.364 0 0-.062.04-.028.129l.226.614.022.036c.033.034.082.016.082.016s.024-.01.053-.026c.531-.293 1.185-.324 1.35-.327h.039l.165.005c.265.02.474.087.623.203.174.135.262.339.262.77v.136l-.101-.014a11.472 11.472 0 0 0-.424-.049 6.982 6.982 0 0 0-.498-.015 3.01 3.01 0 0 0-.785.102c-.25.068-.473.173-.666.313-.192.14-.35.321-.462.533-.113.212-.17.463-.17.744 0 .286.048.534.146.737.097.204.237.374.416.505.177.131.395.227.65.285.249.058.533.087.843.087.327 0 .653-.026.968-.081.313-.054.697-.133.803-.157l.224-.058c.079-.02.072-.106.072-.106l-.001-2.953-.006-.21c-.034-.542-.202-.951-.501-1.216-.335-.297-.827-.447-1.464-.447zm28.73 0c-.396 0-.749.069-1.05.205a2.173 2.173 0 0 0-.759.557 2.375 2.375 0 0 0-.458.828 3.34 3.34 0 0 0-.154 1.027c0 .792.211 1.431.627 1.9.417.47 1.043.709 1.86.709.482 0 .977-.1 1.333-.242 0 0 .068-.033.038-.113l-.23-.647-.025-.042c-.039-.038-.096-.016-.096-.016a2.139 2.139 0 0 1-.438.127 3.37 3.37 0 0 1-.516.037c-.456 0-.818-.137-1.077-.408-.26-.272-.406-.71-.405-1.305.002-.54.13-.947.362-1.256.23-.308.579-.466 1.045-.466.388 0 .685.045.995.145 0 0 .074.032.11-.066.082-.232.143-.398.23-.653.026-.072-.035-.103-.057-.112a3.636 3.636 0 0 0-.629-.16 4.655 4.655 0 0 0-.706-.048zm-3.33.06-.142.004a1.43 1.43 0 0 0-.52.134c-.197.09-.416.237-.538.403v-.393l-.007-.039a.09.09 0 0 0-.085-.06h-.817l-.037.008a.097.097 0 0 0-.055.09v4.818l.008.038c.015.035.05.06.09.06h.837l.038-.008a.098.098 0 0 0 .058-.09v-2.407l.005-.192a2.48 2.48 0 0 1 .101-.655c.07-.2.163-.36.28-.476a.976.976 0 0 1 .393-.24 1.516 1.516 0 0 1 .693-.034l.075.015.01.002c.061.007.096-.03.116-.087.055-.148.21-.59.24-.678.024-.073-.027-.108-.048-.116a2.733 2.733 0 0 0-.534-.093l-.161-.005zM51.445 53.72H50.6c-.054 0-.091.043-.091.097v6.893c0 .054.037.098.09.098h.846c.053 0 .092-.044.092-.098v-6.893c0-.054-.039-.097-.092-.097zm-3.856 4.701c.457.007.865.075.865.075v1.468l-.01.003c-.07.014-.44.088-.85.113-.649.04-.937-.19-.935-.189a.65.65 0 0 1-.184-.191c-.063-.1-.095-.24-.095-.42 0-.284.093-.488.285-.625-.003 0 .274-.242.924-.234zm19.95-1.855c.418 0 .718.147.917.448.2.305.302.74.302 1.293 0 .553-.102.988-.302 1.296-.199.305-.499.454-.917.454-.42 0-.718-.148-.913-.454-.197-.307-.297-.743-.297-1.296s.1-.988.297-1.293c.195-.301.494-.448.913-.448zm-12.82-.02c.418 0 .695.167.894.469.13.199.188.466.21.762H53.55l.032-.179c.048-.229.122-.424.226-.583.195-.303.493-.469.91-.469zm25.53 0c.42 0 .696.167.894.469.132.199.189.466.212.762H79.08l.031-.179a1.72 1.72 0 0 1 .227-.583c.195-.303.492-.469.91-.469z" fill="currentColor" fill-rule="nonzero" />
  </g>
 </symbol>
 <symbol id="logo-slack" viewBox="0 0 120 120">
  <g fill="none" fill-rule="evenodd">
   <path d="M.5-119v360" stroke="currentColor" stroke-linecap="square" />
   <path d="M46.433 65.522c0 2.209-1.878 3.994-4.2 3.994-2.324 0-4.201-1.785-4.201-3.994 0-2.208 1.877-3.993 4.2-3.993h4.2v3.993zm2.1 0c0-2.208 1.878-3.993 4.2-3.993 2.323 0 4.201 1.785 4.201 3.993v9.984c0 2.209-1.878 3.994-4.2 3.994-2.323 0-4.201-1.785-4.201-3.994v-9.984zm4.2-16.035c-2.322 0-4.2-1.785-4.2-3.993 0-2.209 1.878-3.994 4.2-3.994 2.323 0 4.201 1.785 4.201 3.994v3.993h-4.2zm0 2.027c2.323 0 4.201 1.785 4.201 3.994 0 2.209-1.878 3.994-4.2 3.994H42.2c-2.323 0-4.2-1.785-4.2-3.994 0-2.209 1.877-3.994 4.2-3.994h10.533zm16.834 3.994c0-2.209 1.878-3.994 4.2-3.994 2.324 0 4.201 1.785 4.201 3.994 0 2.209-1.877 3.994-4.2 3.994h-4.2v-3.994zm-2.1 0c0 2.209-1.878 3.994-4.2 3.994-2.323 0-4.201-1.785-4.201-3.994V45.494c0-2.209 1.878-3.994 4.2-3.994 2.323 0 4.201 1.785 4.201 3.994v10.014zm-4.2 16.005c2.322 0 4.2 1.785 4.2 3.993 0 2.209-1.878 3.994-4.2 3.994-2.323 0-4.201-1.785-4.201-3.994v-3.993h4.2zm0-1.997c-2.323 0-4.201-1.785-4.201-3.994 0-2.208 1.878-3.993 4.2-3.993H73.8c2.323 0 4.2 1.785 4.2 3.993 0 2.209-1.877 3.994-4.2 3.994H63.267z" fill="currentColor" fill-rule="nonzero" />
  </g>
 </symbol>
 <symbol id="logo-twitter" viewBox="0 0 512 512">
  <path d="M512 97.248c-19.04 8.352-39.328 13.888-60.48 16.576 21.76-12.992 38.368-33.408 46.176-58.016-20.288 12.096-42.688 20.64-66.56 25.408C411.872 60.704 384.416 48 354.464 48c-58.112 0-104.896 47.168-104.896 104.992 0 8.32.704 16.32 2.432 23.936-87.264-4.256-164.48-46.08-216.352-109.792-9.056 15.712-14.368 33.696-14.368 53.056 0 36.352 18.72 68.576 46.624 87.232-16.864-.32-33.408-5.216-47.424-12.928v1.152c0 51.008 36.384 93.376 84.096 103.136-8.544 2.336-17.856 3.456-27.52 3.456-6.72 0-13.504-.384-19.872-1.792 13.6 41.568 52.192 72.128 98.08 73.12-35.712 27.936-81.056 44.768-130.144 44.768-8.608 0-16.864-.384-25.12-1.44C46.496 446.88 101.6 464 161.024 464c193.152 0 298.752-160 298.752-298.688 0-4.64-.16-9.12-.384-13.568 20.832-14.784 38.336-33.248 52.608-54.496z" fill="currentColor" />
 </symbol>
 <symbol id="logo-zoom" viewBox="0 0 120 120">
  <path d="M77.037 57.898c.225.382.3.816.324 1.304l.032.65V64.4l.032.652c.066 1.063.866 1.849 1.958 1.916l.661.032v-7.148l.033-.65c.027-.483.1-.925.329-1.31a2.66 2.66 0 0 1 2.296-1.292 2.66 2.66 0 0 1 2.291 1.301c.226.382.296.824.323 1.3l.033.65v4.55l.032.65c.069 1.07.862 1.855 1.958 1.917L88 67v-7.798c0-2.871-2.373-5.2-5.302-5.2a5.336 5.336 0 0 0-3.978 1.76 5.343 5.343 0 0 0-3.978-1.761 5.324 5.324 0 0 0-2.97.893c-.516-.565-1.671-.893-2.335-.893V67l.664-.032c1.11-.072 1.911-.837 1.954-1.916l.036-.652v-4.548l.032-.65c.028-.49.098-.922.324-1.306a2.666 2.666 0 0 1 2.295-1.296c.946 0 1.821.495 2.295 1.298zm-45.386 9.07.664.032h9.943l-.033-.648c-.09-1.07-.861-1.85-1.955-1.92l-.663-.032H33.64l7.954-7.8-.033-.648c-.052-1.08-.856-1.86-1.955-1.92l-.664-.029L29 54.001l.033.65c.087 1.059.87 1.856 1.954 1.917l.664.032h5.966l-7.954 7.801.033.65c.065 1.072.854 1.848 1.955 1.917zm35.184-11.065a6.436 6.436 0 0 1 1.942 4.597 6.436 6.436 0 0 1-1.942 4.596c-2.59 2.537-6.788 2.537-9.378 0a6.411 6.411 0 0 1 0-9.193A6.693 6.693 0 0 1 62.142 54a6.698 6.698 0 0 1 4.693 1.904zm-1.876 1.841a3.848 3.848 0 0 1 0 5.516 4.036 4.036 0 0 1-5.626 0 3.848 3.848 0 0 1 0-5.516 4.036 4.036 0 0 1 5.626 0zM48.229 54c1.757 0 3.442.685 4.684 1.904a6.41 6.41 0 0 1 0 9.192c-2.59 2.537-6.787 2.537-9.377 0a6.411 6.411 0 0 1 0-9.193A6.693 6.693 0 0 1 48.22 54h.009zm2.808 3.743a3.848 3.848 0 0 1 0 5.516 4.036 4.036 0 0 1-5.625 0 3.848 3.848 0 0 1 0-5.516 4.036 4.036 0 0 1 5.625 0z" fill="currentColor" fill-rule="evenodd" />
 </symbol>
</svg>
      <svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">
 <defs>
  <path id="product-data-classification-engine-a" d="M0 0h2.23v2.28H0z" />
  <path id="product-data-transport-engine-a" d="M0 0h2.67v2.68H0z" />
  <path id="product-data-transport-engine-c" d="M0 0h2.67v2.68H0z" />
  <path id="product-data-transport-engine-e" d="M0 0h2.67v2.68H0z" />
  <path id="product-policy-pack-a" d="M0 0h1.8v1.83H0z" />
  <path id="product-policy-pack-c" d="M0 0h1.8v1.83H0z" />
  <path id="product-policy-pack-e" d="M0 0h1.8v1.83H0z" />
  <path id="product-policy-pack-g" d="M0 0h1.8v1.83H0z" />
  <path id="product-policy-pack-i" d="M0 0h1.8v1.83H0z" />
  <path id="product-policy-pack-k" d="M0 0h1.8v1.83H0z" />
  <path id="product-policy-pack-m" d="M0 0h1.8v1.83H0z" />
  <path id="tech-github-a" d="M0 0h20v20H0z" />
  <path id="tech-unix-linux-a" d="M0 0h15v18H0z" />
  <lineargradient x1="50%" y1="-5.7%" x2="50%" y2="93%" id="tech-microsoft-365-a">
   <stop stop-color="#FFB900" offset="0%" />
   <stop stop-color="#EF8400" offset="17%" />
   <stop stop-color="#E25C01" offset="31%" />
   <stop stop-color="#DB4401" offset="43%" />
   <stop stop-color="#D83B01" offset="50%" />
  </lineargradient>
  <lineargradient x1="66.1%" y1="-2.3%" x2="20.3%" y2="92.5%" id="tech-microsoft-365-b">
   <stop stop-color="#800600" offset="0%" />
   <stop stop-color="#C72127" offset="60%" />
   <stop stop-color="#C13959" offset="73%" />
   <stop stop-color="#BC4B81" offset="85%" />
   <stop stop-color="#B95799" offset="94%" />
   <stop stop-color="#B85BA2" offset="100%" />
  </lineargradient>
  <lineargradient x1="7.9%" y1="50%" x2="191.8%" y2="50%" id="tech-microsoft-365-c">
   <stop stop-color="#F32B44" offset="0%" />
   <stop stop-color="#A4070A" offset="60%" />
  </lineargradient>
  <lineargradient x1="67%" y1="-4.2%" x2="57.3%" y2="15.8%" id="tech-microsoft-365-d">
   <stop stop-opacity=".4" offset="0%" />
   <stop stop-opacity="0" offset="100%" />
  </lineargradient>
  <lineargradient x1="132.9%" y1="52.4%" x2="50.5%" y2="48.3%" id="tech-microsoft-365-e">
   <stop stop-opacity=".4" offset="0%" />
   <stop stop-opacity="0" offset="100%" />
  </lineargradient>
 </defs>
 <symbol id="product-automation-engine" viewBox="0 0 40 40">
  <path d="M30 11.71 11.88 28.86M20.63 10 10 20.86m19.38.57L20.63 30" stroke="#0075FF" fill="none" stroke-linecap="round" stroke-linejoin="round" />
 </symbol>
 <symbol id="product-data-classification-engine" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path stroke="#0075FF" stroke-width=".74" stroke-linecap="round" stroke-linejoin="round" d="m24.25 18.22-4.49 3.28-4.5-3.28 4.5-3.02z" />
   <path stroke="#0075FF" stroke-width=".74" stroke-linecap="round" stroke-linejoin="round" d="m24.25 21.37-4.49 3.28-4.5-3.28 4.5-3.02z" />
   <path d="M19.76 29.22c-.62 0-1.12.51-1.12 1.14 0 .63.5 1.14 1.12 1.14.61 0 1.11-.51 1.11-1.14 0-.63-.5-1.14-1.11-1.14" fill="#0075FF" />
   <g transform="translate(18.64 9)">
    <mask id="product-data-classification-engine-b" fill="#fff">
     <use xlink:href="#product-data-classification-engine-a" />
    </mask>
    <path d="M1.11 0C.5 0 0 .51 0 1.14c0 .63.5 1.14 1.11 1.14.62 0 1.12-.51 1.12-1.14C2.23.5 1.73 0 1.1 0" fill="#0075FF" mask="url(#product-data-classification-engine-b)" />
   </g>
   <path d="M11.11 16.33c.62 0 1.12-.5 1.12-1.14 0-.62-.5-1.13-1.12-1.13-.61 0-1.11.5-1.11 1.13 0 .63.5 1.14 1.11 1.14m17.29-2.27c-.62 0-1.12.5-1.12 1.13 0 .63.5 1.14 1.12 1.14.61 0 1.11-.5 1.11-1.14 0-.62-.5-1.13-1.11-1.13M11.11 26.44c.62 0 1.12-.5 1.12-1.13 0-.63-.5-1.14-1.12-1.14-.61 0-1.11.5-1.11 1.14 0 .62.5 1.13 1.11 1.13m17.09-2.27c-.62 0-1.12.5-1.12 1.14 0 .62.5 1.13 1.12 1.13.61 0 1.11-.5 1.11-1.13 0-.63-.5-1.14-1.11-1.14" fill="#0075FF" />
  </g>
 </symbol>
 <symbol id="product-data-classification-labels" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path stroke="#0075FF" stroke-width=".65" stroke-linecap="round" stroke-linejoin="round" d="M14.51 20h11.73" />
   <path d="M11.08 18.92a1.08 1.08 0 1 0 0 2.16 1.08 1.08 0 0 0 0-2.16" fill="#0075FF" />
   <path stroke="#0075FF" stroke-width=".65" stroke-linecap="round" stroke-linejoin="round" d="M18.27 14.08H30" />
   <path d="M14.5 13a1.08 1.08 0 1 0 1.08 1.08c0-.6-.48-1.08-1.08-1.08" fill="#0075FF" />
   <path stroke="#0075FF" stroke-width=".65" stroke-linecap="round" stroke-linejoin="round" d="M18.27 25.92H30" />
   <path d="M14.5 24.85c-.6 0-1.08.48-1.08 1.07a1.08 1.08 0 0 0 2.16 0c0-.6-.48-1.07-1.08-1.07" fill="#0075FF" />
  </g>
 </symbol>
 <symbol id="product-data-privilege" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path d="M26.13 14.34c.7 0 1.26-.58 1.26-1.29 0-.71-.57-1.29-1.26-1.29-.69 0-1.25.58-1.25 1.3 0 .7.56 1.28 1.25 1.28m2.62 6.9c.69 0 1.25-.58 1.25-1.29 0-.71-.56-1.29-1.25-1.29-.7 0-1.26.58-1.26 1.3 0 .7.57 1.28 1.26 1.28m-9.22-8.66c.7 0 1.26-.58 1.26-1.29 0-.71-.57-1.29-1.26-1.29-.69 0-1.25.58-1.25 1.29 0 .71.56 1.29 1.25 1.29m1.26 7.37c0 .71-.56 1.3-1.26 1.3-.69 0-1.25-.59-1.25-1.3 0-.71.56-1.29 1.25-1.29.7 0 1.26.58 1.26 1.3" fill="#0075FF" />
   <path stroke="#0075FF" stroke-width=".79" stroke-linecap="round" stroke-linejoin="round" d="M19.53 20.02v3.93m8.87 1.13a9.79 9.79 0 0 1-3.13 4.02 9.43 9.43 0 0 1-13.42-2.15 10.07 10.07 0 0 1 2.83-14.32" />
  </g>
 </symbol>
 <symbol id="product-data-transport-engine" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path stroke="#0075FF" stroke-width=".75" d="M11.34 11.34h8.58v8.61m0 0v8.65h8.74" />
   <path d="M20 10a1.34 1.34 0 1 0 0 2.68A1.34 1.34 0 0 0 20 10m-8.66 0a1.34 1.34 0 1 0 0 2.68 1.34 1.34 0 0 0 0-2.68" fill="#0075FF" />
   <g transform="translate(27.33 10)">
    <mask id="product-data-transport-engine-b" fill="#fff">
     <use xlink:href="#product-data-transport-engine-a" />
    </mask>
    <path d="M1.34 0a1.34 1.34 0 1 0 0 2.68 1.34 1.34 0 0 0 0-2.68" fill="#0075FF" mask="url(#product-data-transport-engine-b)" />
   </g>
   <path d="M11.34 21.29a1.34 1.34 0 1 0 0-2.68 1.34 1.34 0 0 0 0 2.68" fill="#0075FF" />
   <g transform="translate(27.33 18.6)">
    <mask id="product-data-transport-engine-d" fill="#fff">
     <use xlink:href="#product-data-transport-engine-c" />
    </mask>
    <path d="M1.34 0a1.34 1.34 0 1 0 0 2.68 1.34 1.34 0 0 0 0-2.68" fill="#0075FF" mask="url(#product-data-transport-engine-d)" />
   </g>
   <path d="M11.34 29.94a1.34 1.34 0 1 0 0-2.68 1.34 1.34 0 0 0 0 2.68" fill="#0075FF" />
   <g transform="translate(27.33 27.26)">
    <mask id="product-data-transport-engine-f" fill="#fff">
     <use xlink:href="#product-data-transport-engine-e" />
    </mask>
    <path d="M1.34 0a1.34 1.34 0 1 0 0 2.68 1.34 1.34 0 0 0 0-2.68" fill="#0075FF" mask="url(#product-data-transport-engine-f)" />
   </g>
   <path d="M20 18.6a1.34 1.34 0 1 0 0 2.69 1.34 1.34 0 0 0 0-2.68m0 8.59a1.4 1.4 0 1 0 0 2.8 1.4 1.4 0 0 0 0-2.8" fill="#0075FF" />
  </g>
 </symbol>
 <symbol id="product-datadvantage-cloud" viewBox="0 0 40 40">
  <path d="M20.76 22.7c-.65 0-1.19.52-1.19 1.15 0 .64.54 1.15 1.2 1.15.65 0 1.18-.51 1.18-1.15 0-.63-.53-1.14-1.19-1.14m0-8.71c-.65 0-1.19.51-1.19 1.15 0 .63.54 1.14 1.2 1.14.65 0 1.18-.51 1.18-1.14 0-.64-.53-1.15-1.19-1.15M12.2 25c.65 0 1.18-.51 1.18-1.15 0-.63-.53-1.14-1.19-1.14-.66 0-1.19.51-1.19 1.14 0 .64.53 1.15 1.2 1.15m2.85-5.96c.65 0 1.19-.51 1.19-1.14 0-.64-.54-1.15-1.2-1.15-.65 0-1.18.51-1.18 1.15 0 .63.53 1.14 1.19 1.14M29.8 22.7c-.65 0-1.18.52-1.18 1.15 0 .64.53 1.15 1.19 1.15.66 0 1.19-.51 1.19-1.15 0-.63-.53-1.14-1.2-1.14m-2.85-5.96c-.65 0-1.19.51-1.19 1.15 0 .63.54 1.14 1.2 1.14.65 0 1.18-.51 1.18-1.14 0-.64-.53-1.15-1.19-1.15" fill="#0075FF" fill-rule="evenodd" />
 </symbol>
 <symbol id="product-datadvantage" viewBox="0 0 40 40">
  <path d="M20 14.29c.64 0 1.16-.52 1.16-1.15 0-.63-.52-1.14-1.16-1.14-.64 0-1.16.51-1.16 1.14 0 .63.52 1.15 1.16 1.15m4.19 4.57c-.65 0-1.17.51-1.17 1.14 0 .63.52 1.14 1.17 1.14.64 0 1.16-.51 1.16-1.14 0-.63-.52-1.14-1.16-1.14m4.65 6.85c-.64 0-1.17.52-1.17 1.15 0 .63.53 1.14 1.17 1.14.64 0 1.16-.51 1.16-1.14 0-.63-.52-1.15-1.16-1.15m-13.49-4.57c.64 0 1.16-.51 1.16-1.14 0-.63-.52-1.14-1.16-1.14-.64 0-1.16.51-1.16 1.14 0 .63.52 1.14 1.16 1.14M20 28c.64 0 1.16-.51 1.16-1.14a1.16 1.16 0 0 0-2.32 0c0 .63.52 1.14 1.16 1.14m-8.84 0c.64 0 1.17-.51 1.17-1.14a1.17 1.17 0 0 0-2.33 0c0 .63.52 1.14 1.16 1.14" fill="#0075FF" fill-rule="evenodd" />
 </symbol>
 <symbol id="product-datalert" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path d="M31.7 20.05c0 6.06-5.03 10.97-11.25 10.97-6.2 0-11.25-4.91-11.25-10.97 0-6.06 5.04-10.98 11.25-10.98 6.22 0 11.25 4.92 11.25 10.98z" stroke="#0075FF" stroke-width=".82" stroke-linecap="round" stroke-linejoin="round" />
   <path d="M26.63 20.05a6.1 6.1 0 0 1-6.18 6.02 6.1 6.1 0 0 1-6.17-6.02 6.1 6.1 0 0 1 6.17-6.02 6.1 6.1 0 0 1 6.18 6.02z" stroke="#0075FF" stroke-width=".82" stroke-linecap="round" stroke-linejoin="round" />
   <path d="M20.45 18.8c-.7 0-1.28.56-1.28 1.25 0 .7.57 1.25 1.28 1.25.71 0 1.3-.56 1.3-1.25 0-.7-.59-1.26-1.3-1.26" fill="#0075FF" />
  </g>
 </symbol>
 <symbol id="product-datanswers" viewBox="0 0 40 40">
  <path d="M11.25 9c-.69 0-1.25.57-1.25 1.28 0 .7.56 1.28 1.25 1.28s1.25-.57 1.25-1.28c0-.7-.56-1.28-1.25-1.28m9 2.56c.69 0 1.25-.57 1.25-1.28 0-.7-.56-1.28-1.25-1.28S19 9.57 19 10.28c0 .7.56 1.28 1.25 1.28M28.75 9c-.69 0-1.25.57-1.25 1.28 0 .7.56 1.28 1.25 1.28S30 11 30 10.28c0-.7-.56-1.28-1.25-1.28m-17.5 9.22c-.69 0-1.25.57-1.25 1.28 0 .7.56 1.28 1.25 1.28s1.25-.57 1.25-1.28c0-.7-.56-1.28-1.25-1.28m9 0c-.69 0-1.25.57-1.25 1.28 0 .7.56 1.28 1.25 1.28s1.25-.57 1.25-1.28c0-.7-.56-1.28-1.25-1.28m-9 9.22c-.69 0-1.25.57-1.25 1.28 0 .7.56 1.28 1.25 1.28s1.25-.57 1.25-1.28c0-.7-.56-1.28-1.25-1.28" fill="#0075FF" fill-rule="evenodd" />
 </symbol>
 <symbol id="product-edge" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path stroke="#0075FF" stroke-width="1.08" stroke-linecap="round" stroke-linejoin="round" d="M19.14 30.64h0" />
   <path d="M15.56 29.62A10.2 10.2 0 0 1 10 20.5c0-4.72 3.17-8.69 7.46-9.84" stroke="#0075FF" stroke-width="1.08" stroke-linecap="round" stroke-linejoin="round" stroke-dasharray="0,3.736267805099487" />
   <path stroke="#0075FF" stroke-width="1.08" stroke-linecap="round" stroke-linejoin="round" d="M19.3 10.36h0" />
   <path d="M20.04 19.34a1.17 1.17 0 0 0 0 2.33c.64 0 1.15-.52 1.15-1.16 0-.64-.51-1.17-1.15-1.17" fill="#0075FF" />
   <path d="M21.2 10.4c4.96.62 8.8 4.9 8.8 10.1 0 5.2-3.85 9.5-8.81 10.1" stroke="#0075FF" stroke-width=".75" stroke-linecap="round" stroke-linejoin="round" />
  </g>
 </symbol>
 <symbol id="product-federal-policy-pack" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path d="M9.21 7a1.18 1.18 0 1 0 1.18 1.18A1.18 1.18 0 0 0 9.21 7Zm0 7.65a1.19 1.19 0 1 0 1.18 1.2v-.02a1.18 1.18 0 0 0-1.18-1.18Zm7.51 0a1.19 1.19 0 1 0 1.18 1.2v-.02c0-.65-.53-1.18-1.18-1.18Zm7.51 0a1.19 1.19 0 1 0 1.19 1.19v-.01c0-.65-.53-1.18-1.18-1.18h-.01Zm7.52-5.29a1.18 1.18 0 1 0 0-2.36 1.18 1.18 0 0 0 0 2.36Zm0 5.29a1.19 1.19 0 1 0-.02 2.38 1.19 1.19 0 0 0 .02-2.38Zm-22.54 7.5a1.19 1.19 0 1 0-.02 2.38 1.19 1.19 0 0 0 .02-2.38Zm7.52 2.37a1.19 1.19 0 1 0-1.18-1.2v.01a1.18 1.18 0 0 0 1.17 1.19h.01Zm-7.52 5.29a1.18 1.18 0 1 0 .01 0h-.01Zm7.52 0a1.18 1.18 0 1 0 .01 0h-.01Z" fill="#0075FF" fill-rule="nonzero" />
   <path d="M9.2 22.15a1.19 1.19 0 1 0-.02 2.38 1.19 1.19 0 0 0 .02-2.38Zm7.52 2.37a1.19 1.19 0 1 0-1.18-1.2v.01a1.18 1.18 0 0 0 1.17 1.19h.01ZM9.2 29.81a1.18 1.18 0 1 0 .01 0H9.2Zm7.52 0a1.18 1.18 0 1 0 .01 0h-.01Zm7.5-7.66a1.19 1.19 0 1 0-.02 2.38 1.19 1.19 0 0 0 .02-2.38Zm7.52 2.37a1.19 1.19 0 1 0-1.18-1.2v.01a1.18 1.18 0 0 0 1.17 1.19h.01Zm-7.52 5.29a1.18 1.18 0 1 0 .01 0h-.01Zm7.52 0a1.18 1.18 0 1 0 .01 0h-.01Z" fill="#0075FF" fill-rule="nonzero" />
   <path stroke="#0075FF" stroke-width="1.06" stroke-linecap="round" stroke-linejoin="round" d="M32.39 15.84H8.57l12.04-8.09 11.78 8.09m-.65 15.15V15.83m-7.51 7.5v-7.5m-7.52 3.39v-3.39" />
  </g>
 </symbol>
 <symbol id="product-policy-pack" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <g transform="translate(11 10)">
    <mask id="product-policy-pack-b" fill="#fff">
     <use xlink:href="#product-policy-pack-a" />
    </mask>
    <path d="M.9 0a.9.9 0 0 0-.9.92c0 .5.4.91.9.91s.9-.41.9-.91S1.4 0 .9 0" fill="#0075FF" mask="url(#product-policy-pack-b)" />
   </g>
   <path d="M17.64 11.83c.5 0 .9-.41.9-.91s-.4-.92-.9-.92-.9.41-.9.92c0 .5.4.91.9.91" fill="#0075FF" />
   <g transform="translate(11 15.93)">
    <mask id="product-policy-pack-d" fill="#fff">
     <use xlink:href="#product-policy-pack-c" />
    </mask>
    <path d="M.9 0a.9.9 0 0 0-.9.92c0 .5.4.91.9.91s.9-.41.9-.91S1.4 0 .9 0" fill="#0075FF" mask="url(#product-policy-pack-d)" />
   </g>
   <path d="M17.64 15.93a.9.9 0 0 0-.9.92.9.9 0 1 0 1.8 0c0-.5-.4-.92-.9-.92" fill="#0075FF" />
   <g transform="translate(22.46 10)">
    <mask id="product-policy-pack-f" fill="#fff">
     <use xlink:href="#product-policy-pack-e" />
    </mask>
    <path d="M.9 0a.9.9 0 0 0-.9.92c0 .5.4.91.9.91s.9-.41.9-.91S1.4 0 .9 0" fill="#0075FF" mask="url(#product-policy-pack-f)" />
   </g>
   <path d="M29.1 11.83c.5 0 .9-.41.9-.91s-.4-.92-.9-.92-.9.41-.9.92c0 .5.4.91.9.91m-5.74 4.1a.9.9 0 0 0-.9.92.9.9 0 1 0 1.8 0c0-.5-.4-.92-.9-.92" fill="#0075FF" />
   <g transform="translate(28.2 15.93)">
    <mask id="product-policy-pack-h" fill="#fff">
     <use xlink:href="#product-policy-pack-g" />
    </mask>
    <path d="M.9 0a.9.9 0 0 0-.9.92c0 .5.4.91.9.91s.9-.41.9-.91S1.4 0 .9 0" fill="#0075FF" mask="url(#product-policy-pack-h)" />
   </g>
   <g transform="translate(11 21.75)">
    <mask id="product-policy-pack-j" fill="#fff">
     <use xlink:href="#product-policy-pack-i" />
    </mask>
    <path d="M.9 0a.9.9 0 0 0-.9.92c0 .5.4.91.9.91s.9-.41.9-.91S1.4 0 .9 0" fill="#0075FF" mask="url(#product-policy-pack-j)" />
   </g>
   <path d="M17.64 23.58c.5 0 .9-.41.9-.92a.9.9 0 1 0-1.8 0c0 .5.4.92.9.92" fill="#0075FF" />
   <g transform="translate(11 27.68)">
    <mask id="product-policy-pack-l" fill="#fff">
     <use xlink:href="#product-policy-pack-k" />
    </mask>
    <path d="M.9 0a.9.9 0 0 0-.9.92c0 .5.4.91.9.91s.9-.41.9-.91S1.4 0 .9 0" fill="#0075FF" mask="url(#product-policy-pack-l)" />
   </g>
   <path d="M17.64 27.68a.9.9 0 0 0-.9.92.9.9 0 1 0 1.8 0c0-.5-.4-.92-.9-.92m5.72-5.93c-.5 0-.9.4-.9.91 0 .5.4.92.9.92s.9-.41.9-.92a.9.9 0 0 0-.9-.91m5.74 1.83c.5 0 .9-.41.9-.92a.9.9 0 1 0-1.8 0c0 .5.4.92.9.92m-5.74 4.1a.9.9 0 0 0-.9.92.9.9 0 1 0 1.8 0c0-.5-.4-.92-.9-.92" fill="#0075FF" />
   <g transform="translate(28.2 27.68)">
    <mask id="product-policy-pack-n" fill="#fff">
     <use xlink:href="#product-policy-pack-m" />
    </mask>
    <path d="M.9 0a.9.9 0 0 0-.9.92c0 .5.4.91.9.91s.9-.41.9-.91S1.4 0 .9 0" fill="#0075FF" mask="url(#product-policy-pack-n)" />
   </g>
  </g>
 </symbol>
 <symbol id="product-varonis-active-directory" viewBox="0 0 40 40">
  <g stroke="#0075FF" stroke-width="1.03" fill="none" fill-rule="evenodd">
   <path stroke-linecap="round" stroke-linejoin="round" d="m12.57 23.82 6.23-7.22m8.67 7.05-6.23-7.22" />
   <path d="M21.6 14.67a1.67 1.67 0 1 1-3.33 0 1.67 1.67 0 1 1 3.33 0zm-8.27 10.55a1.67 1.67 0 1 1-3.33 0 1.66 1.66 0 1 1 3.33 0zm8.32 0a1.67 1.67 0 1 1-3.33 0 1.67 1.67 0 1 1 3.33 0zm8.31 0c0 .92-.74 1.67-1.66 1.67a1.67 1.67 0 0 1 0-3.35c.92 0 1.66.75 1.66 1.68z" />
   <path stroke-linecap="round" stroke-linejoin="round" d="M19.98 16.91v6.64" />
  </g>
 </symbol>
 <symbol id="product-varonis-m365" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path stroke="#0075FF" stroke-width=".75" stroke-linecap="round" stroke-linejoin="round" d="M28 28H12.18V12H28zm-7.91-15.84v15.68M27.84 20H16.37" />
   <path d="M13.23 20a1.06 1.06 0 1 1-2.13 0 1.06 1.06 0 1 1 2.13 0" fill="#0075FF" />
   <path d="M16.37 20a4.2 4.2 0 0 1-4.19 4.23A4.2 4.2 0 0 1 8 20a4.2 4.2 0 0 1 4.18-4.23A4.2 4.2 0 0 1 16.37 20z" stroke="#0075FF" stroke-width=".75" stroke-linecap="round" stroke-linejoin="round" />
  </g>
 </symbol>
 <symbol id="tech-active-directory" viewBox="0 0 40 40">
  <path d="M19.3 11v19L10 22.24zm1.4 0v19l9.3-7.76z" fill="#00ADEF" fill-rule="evenodd" />
 </symbol>
 <symbol id="tech-box" viewBox="0 0 40 40">
  <path d="M29.82 24.77a.8.8 0 0 1-.1 1.07c-.35.25-.85.2-1.1-.1l-1.74-2.3-1.7 2.24c-.25.36-.75.36-1.1.1-.35-.25-.4-.7-.15-1.06l2-2.65-2-2.64a.87.87 0 0 1 .15-1.12.83.83 0 0 1 1.1.15l1.7 2.29 1.75-2.19c.24-.35.7-.4 1.1-.15.34.25.34.76.1 1.12l-1.95 2.6 1.94 2.64zm-9.08-.3a2.32 2.32 0 0 1-2.35-2.35 2.36 2.36 0 0 1 2.35-2.34c1.3 0 2.34 1.07 2.34 2.34a2.39 2.39 0 0 1-2.34 2.34zm-6.9 0a2.32 2.32 0 0 1-2.34-2.35 2.36 2.36 0 0 1 2.34-2.34c1.3 0 2.35 1.07 2.35 2.34a2.32 2.32 0 0 1-2.35 2.34zm6.9-6.21c-1.45 0-2.75.81-3.4 2.03a3.88 3.88 0 0 0-3.45-2.03c-.9 0-1.7.3-2.34.76v-3.26c0-.4-.35-.76-.75-.76-.45 0-.8.36-.8.76v6.41a3.86 3.86 0 0 0 7.29 1.73 3.9 3.9 0 0 0 3.4 2.09 3.9 3.9 0 0 0 3.9-3.92 3.8 3.8 0 0 0-3.85-3.81z" fill="#0071F7" />
 </symbol>
 <symbol id="tech-github" viewBox="0 0 40 40">
  <g transform="translate(10 10)" fill="none" fill-rule="evenodd">
   <mask id="tech-github-b" fill="#fff">
    <use xlink:href="#tech-github-a" />
   </mask>
   <path d="M10 0C4.48 0 0 4.59 0 10.25c0 4.53 2.87 8.38 6.84 9.73.5.1.68-.22.68-.5l-.01-1.74c-2.78.62-3.37-1.37-3.37-1.37-.46-1.18-1.11-1.5-1.11-1.5-.9-.64.07-.62.07-.62 1 .07 1.53 1.05 1.53 1.05.9 1.57 2.34 1.12 2.91.86.1-.67.35-1.12.63-1.38-2.22-.25-4.55-1.13-4.55-5.06a4 4 0 0 1 1.03-2.75c-.1-.26-.45-1.3.1-2.72 0 0 .84-.27 2.75 1.05a9.33 9.33 0 0 1 5 0c1.91-1.32 2.75-1.05 2.75-1.05.55 1.41.2 2.46.1 2.72a4.01 4.01 0 0 1 1.03 2.75c0 3.94-2.34 4.8-4.57 5.06.36.31.68.94.68 1.9l-.01 2.8c0 .28.18.6.69.5A10.24 10.24 0 0 0 20 10.25C20 4.6 15.52 0 10 0" fill="#181717" mask="url(#tech-github-b)" />
  </g>
 </symbol>
 <symbol id="tech-google-workspaces" viewBox="0 0 40 40">
  <g fill="none">
   <path d="m12.44 25.71.83 1.37c.18.28.43.51.72.67l3-4.88H11c0 .32.09.64.26.92l1.18 1.92z" fill="#0066DA" />
   <path d="m20.5 17.13-3-4.88a1.9 1.9 0 0 0-.71.67l-5.53 9.03c-.17.28-.26.6-.26.92h5.99l3.51-5.74z" fill="#00AC47" />
   <path d="M27 27.75c.3-.16.55-.39.73-.67l.34-.57 1.67-2.72c.17-.28.26-.6.26-.92h-5.99l1.28 2.36L27 27.75z" fill="#EA4335" />
   <path d="m20.5 17.13 3-4.88a2 2 0 0 0-.99-.25H18.5c-.35 0-.69.1-.98.25l2.99 4.88z" fill="#00832D" />
   <path d="M24.01 22.87H17l-3 4.88a2 2 0 0 0 .98.25h11.06c.35 0 .68-.1.98-.25l-3-4.88z" fill="#2684FC" />
   <path d="m26.97 17.44-2.76-4.52a1.92 1.92 0 0 0-.72-.67l-2.99 4.88 3.51 5.74H30c0-.32-.09-.63-.26-.92l-2.76-4.51z" fill="#FFBA00" />
  </g>
 </symbol>
 <symbol id="tech-microsoft-365" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <g opacity=".2" style="mix-blend-mode:multiply" transform="translate(13.6 25.6)">
    <image style="mix-blend-mode:multiply" width="15.4" height="5.9" xlink:href="" />
    <path d="M1.7 0a1.1 1.1 0 0 0-.6 2.2l4.2 2.3c.5.3 1.1.3 1.7.2l6.2-1.8a2 2 0 0 0 1.6-2V0h-13Z" fill="#FFF" fill-rule="nonzero" />
   </g>
   <g opacity=".1" style="mix-blend-mode:multiply" transform="translate(14 25.5)">
    <image style="mix-blend-mode:multiply" width="14.7" height="5.2" xlink:href="" />
    <path d="M1.4.2C.9.2.4.5.3 1c-.2.5 0 1 .5 1.3L5 4.6c.6.3 1.2.3 1.8.2L12.9 3a2 2 0 0 0 1.6-2V.2H1.4Z" fill="#FFF" fill-rule="nonzero" />
   </g>
   <path d="m9.6 0 1.6 3.8v12.9l-1.6 4.6 6.2-1.7c1-.3 1.6-1.1 1.6-2.1V3.9c0-1-.7-1.8-1.6-2.1L9.6.1Z" fill="url(#tech-microsoft-365-a)" fill-rule="nonzero" transform="translate(11 9)" />
   <path d="m1.7 16.6 1.8-1c.5-.3.9-.8.9-1.3v-7c0-.6.4-1.2 1-1.4l5.8-2.1V2.2A2.2 2.2 0 0 0 9 0c-.4 0-.7.1-1 .3L1 4c-.6.4-1 1.1-1 2v9.7c0 .4.2.7.6 1 .3.1.8.2 1.1 0Z" fill="url(#tech-microsoft-365-b)" fill-rule="nonzero" transform="translate(11 9)" />
   <path d="M11.2 16.7H4.3c-.5 0-1 .4-1 .9-.2.5 0 1 .5 1.2l4 2.3c.6.3 1.2.4 1.8.2 1-.3 1.6-1.1 1.6-2.1v-2.5Z" fill="url(#tech-microsoft-365-c)" fill-rule="nonzero" transform="translate(11 9)" />
   <path d="m1.7 16.6 1.8-1c.5-.3.9-.8.9-1.3v-7c0-.6.4-1.2 1-1.4l5.8-2.1V2.2A2.2 2.2 0 0 0 9 0c-.4 0-.7.1-1 .3L1 4c-.6.4-1 1.1-1 2v9.7c0 .4.2.7.6 1 .3.1.8.2 1.1 0Z" fill="url(#tech-microsoft-365-d)" fill-rule="nonzero" transform="translate(11 9)" />
   <path d="M11.2 16.7H4.3c-.5 0-1 .4-1 .9-.2.5 0 1 .5 1.2l4 2.3c.6.3 1.2.4 1.8.2 1-.3 1.6-1.1 1.6-2.1v-2.5Z" fill="url(#tech-microsoft-365-e)" fill-rule="nonzero" transform="translate(11 9)" />
  </g>
 </symbol>
 <symbol id="tech-nasuni" viewBox="0 0 40 40">
  <g fill="#59A732">
   <path d="m28.14 22.53-.03-.03-.04.03c-.13.08-.27.18-.45.27l-.05.03.04.05c.2.22.32.5.33.8-.03.36-.22.7-.5.93-.98.93-3.44 1.93-7.47 1.93-5.45.02-7.95-1.65-7.95-2.86.03-.33.2-.63.45-.85l.05-.05-.06-.03c-.19-.1-.37-.22-.51-.34l-.04-.02-.03.03a2.17 2.17 0 0 0-.88 1.7c0 2.59 5.63 3.88 8.78 3.88 2.4 0 9.22-.71 9.22-3.87a2.08 2.08 0 0 0-.86-1.6zM15.32 20.8l-.73.15.72.2c.2.06.42.12.64.16h.09a18.5 18.5 0 0 1 3.93-.38c1.35-.02 2.7.1 4.01.35h.09l.44-.12.72-.2-.73-.15c-1.49-.31-3-.48-4.52-.5-1.57.02-3.13.18-4.66.49zm4.43-1.34c2.4 0 9.22-.7 9.22-3.87.01-1.22-1.2-2.2-3.49-2.85-1.8-.48-3.64-.73-5.5-.74-3.11 0-8.98.75-8.98 3.6 0 2.57 5.6 3.86 8.75 3.86zm8.2-4.3c-.04.37-.22.7-.51.94-.97.93-3.44 1.93-7.47 1.93-5.45 0-7.95-1.7-7.95-2.87.03-.3.19-.6.43-.8.93-.92 3.4-1.9 7.53-1.9 5.46 0 7.95 1.42 7.96 2.7h.01z" />
   <path d="m15.32 16.33-.73.13.72.2c.21.06.43.12.64.16h.09c1.3-.26 2.62-.4 3.94-.38 1.35-.01 2.69.1 4.01.35h.09l.43-.11.73-.2-.74-.15c-1.49-.31-3-.48-4.52-.5-1.57.02-3.13.19-4.66.5zm4.43 7.62c2.4 0 9.22-.71 9.22-3.87a2.07 2.07 0 0 0-.84-1.6l-.03-.03-.04.02c-.13.1-.27.18-.45.28l-.05.03.04.05c.2.23.32.51.33.81-.04.37-.22.7-.51.94-.97.93-3.44 1.93-7.47 1.93-5.43 0-7.93-1.67-7.93-2.86.03-.33.2-.63.45-.85l.07-.02-.06-.04a3.7 3.7 0 0 1-.52-.33l-.03-.02-.04.02c-.54.4-.87 1.01-.89 1.67 0 2.57 5.6 3.87 8.75 3.87z" />
  </g>
 </symbol>
 <symbol id="tech-netapp" viewBox="0 0 40 40">
  <path d="M12 14v13h6.22v-7.8h3.56V27H28V14z" fill="#212234" />
 </symbol>
 <symbol id="tech-okta" viewBox="0 0 40 40">
  <path d="M10.27 18.26c-1.8 0-3.27 1.5-3.27 3.36a3.31 3.31 0 0 0 3.27 3.36c1.8 0 3.27-1.5 3.27-3.36a3.31 3.31 0 0 0-3.27-3.36zm0 5.04c-.9 0-1.64-.75-1.64-1.68 0-.93.74-1.68 1.64-1.68.9 0 1.64.75 1.64 1.68 0 .93-.74 1.68-1.64 1.68zm5.75-.55c0-.27.3-.4.49-.2.82.85 2.17 2.32 2.18 2.32.02.02.04.06.11.08.04.02.09.02.15.02h1.47c.27 0 .35-.32.22-.48l-2.44-2.57-.13-.13c-.28-.34-.25-.48.07-.83l1.94-2.22c.12-.16.04-.47-.23-.47h-1.34c-.05 0-.09 0-.13.02-.08.02-.1.05-.13.08l-1.74 1.92c-.18.2-.5.07-.5-.2v-3.82c0-.2-.16-.27-.29-.27h-1.09c-.19 0-.28.13-.28.24v8.46c0 .2.16.25.29.25h1.09c.17 0 .28-.13.28-.26v-1.94zm8.91 1.91-.11-1.12a.26.26 0 0 0-.3-.24c-.1.02-.18.02-.26.02-.87 0-1.58-.7-1.63-1.59v-1.47c0-.18.13-.32.3-.32h1.46c.1 0 .26-.1.26-.3V18.6c0-.21-.13-.32-.24-.32h-1.48a.3.3 0 0 1-.31-.3v-1.7a.27.27 0 0 0-.28-.27h-1.09a.25.25 0 0 0-.26.26v5.47a3.31 3.31 0 0 0 3.7 3.24.27.27 0 0 0 .24-.31zm7.88-1.41c-.92 0-1.06-.34-1.06-1.62v-3.08c0-.1-.08-.28-.3-.28h-1.08a.29.29 0 0 0-.29.28v.14a3.16 3.16 0 0 0-1.61-.44c-1.8 0-3.27 1.5-3.27 3.36a3.31 3.31 0 0 0 3.27 3.36c.81 0 1.55-.3 2.13-.8.3.48.8.8 1.57.8.13 0 .83.03.83-.31v-1.2c0-.1-.08-.21-.19-.21zm-4.33.05c-.9 0-1.64-.75-1.64-1.68 0-.93.73-1.68 1.64-1.68.9 0 1.63.75 1.63 1.68 0 .93-.74 1.68-1.63 1.68z" fill="#007DC1" />
 </symbol>
 <symbol id="tech-salesforce" viewBox="0 0 40 40">
  <g fill="none">
   <path d="M17.99 13.85a4.18 4.18 0 0 1 6.74.9 5.07 5.07 0 0 1 2.1-.45A5.23 5.23 0 0 1 32 19.58a5.23 5.23 0 0 1-6.2 5.18 3.77 3.77 0 0 1-4.95 1.58A4.32 4.32 0 0 1 16.88 29a4.32 4.32 0 0 1-4.05-2.86 4.05 4.05 0 0 1-4.83-4c0-1.52.8-2.85 2-3.56A4.74 4.74 0 0 1 14.28 12c1.51 0 2.86.73 3.7 1.85" fill="#00A1E0" />
   <path d="M11.48 20.82c-.02.04 0 .04 0 .05l.14.08c.25.14.48.17.72.17.5 0 .8-.26.8-.69 0-.4-.35-.54-.67-.65l-.04-.01c-.25-.08-.46-.15-.46-.31v-.01c0-.14.13-.24.32-.24.2 0 .46.07.62.16 0 0 .05.03.07-.02l.1-.27c0-.03 0-.04-.03-.06-.18-.1-.44-.19-.7-.19h-.05c-.45 0-.77.28-.77.67v.01c0 .42.35.55.68.65l.05.01c.24.08.44.14.44.3v.02c0 .15-.13.27-.35.27-.08 0-.34 0-.63-.19l-.08-.05c-.02 0-.05-.02-.07.02l-.1.28zm7.2 0c-.01.04 0 .04.01.05l.14.08c.25.14.48.17.72.17.5 0 .8-.26.8-.69 0-.4-.35-.54-.67-.65l-.04-.01c-.25-.08-.46-.15-.46-.31v-.01c0-.14.12-.24.31-.24.22 0 .47.07.63.16 0 0 .05.03.07-.02l.1-.27c0-.03-.01-.04-.03-.06-.18-.1-.44-.19-.7-.19h-.05c-.45 0-.77.28-.77.67v.01c0 .42.35.55.67.65l.06.01c.23.08.44.14.44.3v.02c0 .15-.14.27-.35.27-.08 0-.35 0-.63-.19l-.08-.05c-.01 0-.06-.02-.07.02l-.1.28zm4.92-.84c0 .24-.04.43-.13.57-.08.13-.22.2-.4.2a.45.45 0 0 1-.4-.2 1.05 1.05 0 0 1-.13-.57c0-.24.05-.43.13-.56.09-.13.22-.2.4-.2.18 0 .32.07.4.2.09.13.13.32.13.56m.41-.45a.9.9 0 0 0-.5-.6 1.03 1.03 0 0 0-.44-.09c-.17 0-.31.03-.44.09a.91.91 0 0 0-.5.6 1.6 1.6 0 0 0 0 .9.96.96 0 0 0 .5.6c.13.06.27.09.44.09.17 0 .32-.03.44-.1a.88.88 0 0 0 .32-.23 1 1 0 0 0 .18-.36 1.59 1.59 0 0 0 0-.9m3.38 1.15c-.01-.04-.05-.03-.05-.03a.93.93 0 0 1-.42.08.62.62 0 0 1-.47-.18c-.11-.12-.18-.31-.18-.57a.9.9 0 0 1 .16-.55c.1-.13.25-.2.46-.2.17 0 .3.02.43.06 0 0 .03.01.05-.03l.1-.28c.01-.03-.02-.05-.02-.05a1.59 1.59 0 0 0-1.05 0 .95.95 0 0 0-.53.6c-.04.14-.06.29-.06.45 0 .34.09.62.27.83.18.2.46.3.81.3.21 0 .43-.04.58-.1 0 0 .03-.01.02-.05l-.1-.28zm.72-.93a.82.82 0 0 1 .11-.33c.09-.13.22-.2.4-.2.18 0 .3.07.39.2.06.08.08.2.09.33h-1zm1.38-.3a.88.88 0 0 0-.44-.53 1 1 0 0 0-.4-.08c-.17 0-.33.03-.46.09a.92.92 0 0 0-.32.25c-.08.1-.15.22-.19.36a1.6 1.6 0 0 0 0 .9c.05.14.12.26.2.36a1.24 1.24 0 0 0 .86.32c.4 0 .61-.1.7-.14.02-.01.03-.03.01-.07l-.09-.26c-.01-.04-.05-.02-.05-.02-.1.03-.24.1-.57.1-.22 0-.38-.06-.48-.17-.1-.1-.15-.25-.16-.46h1.4s.03 0 .03-.04c0-.01.05-.29-.04-.6m-12.52.29a.83.83 0 0 1 .11-.33c.08-.13.21-.2.4-.2.18 0 .3.07.39.2.05.08.08.2.09.33h-1zm1.38-.3a.88.88 0 0 0-.44-.53 1 1 0 0 0-.4-.08c-.17 0-.33.03-.46.09a.91.91 0 0 0-.32.25c-.08.1-.15.22-.19.36a1.61 1.61 0 0 0 0 .9c.05.14.11.26.2.36a1.24 1.24 0 0 0 .86.32c.4 0 .61-.1.7-.14.02-.01.03-.03.01-.07l-.09-.26c-.01-.04-.05-.02-.05-.02-.1.03-.24.1-.57.1-.22 0-.38-.06-.48-.17-.1-.1-.15-.25-.16-.46h1.4s.03 0 .03-.04c0-.01.05-.29-.04-.6m-4.39 1.21a.28.28 0 0 1-.08-.08.34.34 0 0 1-.04-.19c0-.12.04-.2.12-.27 0 0 .12-.1.4-.1.2 0 .38.03.38.03v.64s-.17.04-.37.05c-.28.02-.41-.08-.41-.08m.55-.99h-.21c-.12 0-.24.01-.35.04-.1.03-.2.08-.29.14a.68.68 0 0 0-.2.23c-.05.1-.07.2-.07.32 0 .13.02.24.06.32.04.1.1.17.18.22.08.06.18.1.29.13.1.02.23.04.36.04.15 0 .29-.02.43-.04a8.8 8.8 0 0 0 .44-.1c.04 0 .04-.04.04-.04v-1.29c0-.28-.08-.49-.23-.62a.92.92 0 0 0-.63-.2c-.1 0-.28.02-.38.04 0 0-.3.06-.43.16 0 0-.02.02 0 .06l.09.26c.01.04.05.03.05.03l.02-.01c.27-.15.6-.15.6-.15.16 0 .27.03.35.1.07.05.11.14.11.33v.06a4.98 4.98 0 0 0-.23-.03m11.22-.72c.01-.04 0-.05-.02-.05a1.2 1.2 0 0 0-.23-.04.69.69 0 0 0-.6.23v-.17c0-.03-.01-.04-.03-.04h-.36c-.02 0-.04.01-.04.04v2.1c0 .02.02.04.04.04h.37c.02 0 .04-.02.04-.04v-1.05a1 1 0 0 1 .05-.37.53.53 0 0 1 .12-.2c.05-.06.1-.1.17-.11a.66.66 0 0 1 .34-.01c.03 0 .04-.01.05-.04.02-.06.1-.26.1-.3" fill="#FFF" />
   <path d="M22.3 17.98a1.18 1.18 0 0 0-.32-.04.8.8 0 0 0-.6.2c-.13.15-.22.37-.27.65l-.02.1h-.31s-.04 0-.05.03l-.05.3c0 .02 0 .04.04.04h.3l-.3 1.76a2.2 2.2 0 0 1-.09.35.71.71 0 0 1-.1.2.26.26 0 0 1-.12.1.51.51 0 0 1-.28.01.33.33 0 0 1-.07-.02s-.04-.02-.05.02l-.1.29c-.01.02 0 .05.02.05l.12.04a1 1 0 0 0 .55-.03c.1-.04.18-.1.26-.19a.94.94 0 0 0 .18-.31c.05-.13.09-.29.12-.47l.31-1.8h.46s.04 0 .05-.04l.05-.3c0-.02 0-.04-.05-.04h-.44s.02-.17.07-.31a.42.42 0 0 1 .1-.15.3.3 0 0 1 .12-.08l.15-.02a.58.58 0 0 1 .18.03c.05.01.05 0 .06-.02l.1-.3c.02-.03 0-.04-.02-.05m-6.21 3.05c0 .02-.02.04-.04.04h-.37a.04.04 0 0 1-.04-.04v-3c0-.03.02-.05.04-.05h.37c.02 0 .04.02.04.04v3z" fill="#FFF" />
  </g>
 </symbol>
 <symbol id="tech-slack" viewBox="0 0 40 40">
  <g fill="none">
   <path d="M15.37 22.11a1.68 1.68 0 1 1-1.68-1.68h1.68v1.68zm.84 0a1.68 1.68 0 1 1 3.36 0v4.2a1.68 1.68 0 1 1-3.36 0v-4.2z" fill="#E01E5A" />
   <path d="M17.9 15.36a1.68 1.68 0 1 1 1.67-1.68v1.68H17.9zm0 .86a1.68 1.68 0 1 1 0 3.36h-4.22a1.68 1.68 0 1 1 0-3.36h4.21z" fill="#36C5F0" />
   <path d="M24.63 17.9a1.68 1.68 0 1 1 1.68 1.68h-1.68V17.9zm-.84 0a1.68 1.68 0 1 1-3.36 0v-4.22a1.68 1.68 0 1 1 3.36 0v4.22z" fill="#2EB67D" />
   <path d="M22.1 24.64a1.68 1.68 0 1 1-1.67 1.68v-1.68h1.68zm0-.84a1.68 1.68 0 1 1 0-3.37h4.22a1.68 1.68 0 1 1 0 3.37h-4.21z" fill="#ECB22E" />
  </g>
 </symbol>
 <symbol id="tech-unix-linux" viewBox="0 0 40 40">
  <g fill="none" fill-rule="evenodd">
   <path fill="#FEFEFE" d="m18.06 15.57-.03-2.02 1.17-.71 1.72-1.2.71-.03.74.82.4 2.73-.54 1-2.24-.06z" />
   <path fill="#FEFEFE" d="m15.72 21.36.6-1.74 1.18-1.44.6-1.24.26-.41 4.3-.68.86 1.39 2.41 5.92-.83 1.05-2.19 3.75-.51.11-3.99.12-2.78-3.18-.46-2.65z" />
   <path d="M21.33 16.82s-.14-.03.26-.12c.4-.08.4-.17.51-.29.11-.12.17-.38.17-.67 0-.3.14-1.14.12-1.38a3.3 3.3 0 0 0-.72-1.23c-.2-.11-2.43-.32-2.43-.32l-.68.56-.52.5.12 1.58s-.15.5-.12.7c.03.2.32.44.43.55.12.12.54.6.69.74.14.14.17.29.51.17.34-.12.54-.12.8-.32s.86-.47.86-.47" fill="#FFD300" />
   <path d="M20.01 14.33c.1-.23.2-.67.4-.81.2-.15.63-.27.89-.24.26.03.74.3.86.5.11.2.11 1.02.11 1.02l-.06.68-.4-.03-.85-.36h-.15s-.14.06-.57-.17c-.43-.24-.31-.35-.23-.59m-.91.65a.4.4 0 0 1 .08-.05c.17-.1.55-.25.55-.25s.37-.96.05-1.34c-.3-.38-1-.32-1-.32s-.74.44-.7.61c.02.18.05.8.08.88l.14 1.02.26-.11.37-.3s.09-.05.17-.14" fill="#FEFEFE" />
   <path d="M24.56 23.81a248.54 248.54 0 0 0 .6.05c.3 0 .57.06.86.1.19.01.5.14.52.38.04.36-.07.76.23.9l.99.71.2.38-.6.56-2.94 1.81-1.35-.47v-1.1l.06-1.5-.14-1.35.22-.52.58-.18.77.23zm-8.51-.65c-.03-.03-.56.13-.59.13-.24.04-.55.21-.55.48 0 .14-.01.29-.07.41-.05.1-.16.25-.16.28-.04.1-.1.26-.2.32l-.61.06h-.43l-.26.32.2.85-.05.67-.2.76.48.26 3.66 1 .83-.26.43-1.09-.09-.4-.4-.82-2-2.97" fill="#FFD300" />
   <g transform="translate(13 11)">
    <mask id="tech-unix-linux-b" fill="#fff">
     <use xlink:href="#tech-unix-linux-a" />
    </mask>
    <path d="M8.71 1.02c-.09-.08-.23-.1-.27.02-.05.1-.03.2-.05.32 0 .04-.05.05-.07.08-.04.05-.03.1-.01.12.08.09.24-.09.35-.15.09-.06.21.01.3-.05.03-.02.04-.06.01-.1-.06-.1-.16-.16-.26-.24m-2.8 2.3c-.09 0-.06.08-.05.14.12.07.14.24.16.37 0 .05.08.02.09 0 .05-.1-.02-.21-.04-.34a.4.4 0 0 0-.13-.18l-.03.01m2.19.05c.1 0 .23.19.25.4 0 .03.08.03.1 0 .05-.08.02-.18 0-.28-.02-.08-.12-.16-.2-.2a.3.3 0 0 0-.18-.03c-.02.01-.08.1.03.11m-1.07.73c.04.07.12.07.19.1.04.02.1.04.13-.01.05-.17-.17-.12-.27-.12-.02 0-.07 0-.05.03m-.52-.02c-.11-.02-.24-.01-.32.08-.02.03-.01.11.04.13.07.03.11-.04.12-.09.01-.02.02-.05.04-.06l.1-.01c.04-.02.03-.05.02-.05m3.3 1.86c.16.14.26.26.35.06.09-.2.09-.29-.13-.37a.92.92 0 0 1-.4-.29c-.1-.11-.13.08-.05.27.1.24.15.26.24.33M3.5 9.08c.07.1.18-.12.3-.2a.4.4 0 0 0 .11-.37c-.01-.07-.12-.04-.14-.02-.07.07-.06.19-.1.28-.06.12-.25.22-.17.31m1.4-6.1C4.85.92 5.63.02 7.24 0c1.62-.03 2.63.84 2.83 1.98.2 1.14.1 2.65.5 3.43.41.78.68 1.38 1.38 2.28a6.5 6.5 0 0 1 1.35 2.93c.2 1.12.32 1.64-.2 2.21-.53.57-1.47 1.5-2.17.45-.36-.52-.4-1.18.2-1.32.38-.09.66-.06.94.09.28.15.35.08.01-.18-.34-.26-.41-.02-.3-.44a3.1 3.1 0 0 0-.04-2c-.15-.39-.66-1.44-1.13-1.7-.05-.02-.17-.07-.09.03.13.17.82 1.2 1.01 1.81.2.66.24 1.29.13 1.69-.1.4-.3.56-.52.56-.23 0-.43.1-.43-.42 0-.53.05-1.33-.23-2.01-.27-.68-.61-1.14-.69-1.43-.07-.28-.23-1.05-.57-1.48-.34-.44-.48-.72-.3-1.22.17-.5.04-.63-.31-.74-.36-.1-.83-.25-.94-.5-.12-.23-.05-.72.22-.83.26-.12.7.04.72.39.01.34-.15.52-.1.6.04.07.27.2.39.06s.15-.56.03-.95c-.12-.39-.18-.66-.6-.75-.43-.1-.62-.06-.83.21-.2.27-.29.7-.23 1.02.06.32-.06.14-.26.12-.21-.01-.15-.03-.36-.01-.2.01-.13-.12-.14-.35-.02-.23-.05-.7-.36-.87-.3-.18-.83.03-.82.78.02.75.27 1.11.41.84.15-.27.08-.13-.07-.25-.15-.12-.25-.62-.09-.77.16-.15.35-.15.46-.06.1.1.26.4.23.59-.03.2-.04.2-.23.34-.2.14-.27.26-.49.4-.22.16-.3.5-.13.6.18.08.2.07.34.3.14.22.4.33 1.01.22.62-.1.87-.26 1.34-.42.34-.12.22-.1.34-.24.11-.14.3.06.13.18-.18.12-.58.24-.87.34-.3.11-.63.41-1.25.38-.61-.03-.19-.02-.38-.03-.19-.02-.28.01-.07.16.2.16.19.2.36.26.18.06.41.06.7-.04.27-.11.98-.43 1.2-.58.22-.15.4.05.18.2-.23.15-.29.1-.5.24-.2.14-.58.36-.83.6s-.3.26-.61.27c-.31.02-.5-.31-.63-.46-.14-.15-.12-.24-.28-.42-.16-.18-.18-.14-.2.06-.04.2-.26.69-.45 1.02-.19.33-.2.73-.18 1.02.03.28-.04.31-.26.65-.22.33-.59 1.3-.64 1.62a5.7 5.7 0 0 0-.1 1.33c.02.38-.08.46-.35.2a1.1 1.1 0 0 1-.33-.92c.01-.32.05-.54.1-.66.03-.12 0-.2-.09-.06a1.9 1.9 0 0 0-.14 1.07c.04.2.05.54.54 1 .48.47 1.19 1.12 1.77 1.55.6.44.8.98-.07 1.37.54.75.84 1.14.6 1.64.49-.29.3-.96.07-1.14-.24-.18-.1-.32.1-.18.21.13.29.4 1.1.39.8-.02 1.67-.1 2.16-.82.48-.72.57-.12.46.3-.12.42-.4 1.37.05 1.28.05-.55.19-1.03.19-1.63 0-.6.06-.9.01-1.77-.04-.84.31-.9.68-.9.36 0 .25.25.01.23-.23-.01-.48.08-.5.7-.01.6 0 .55.1 1.1.1.56.12.73.03 1.34-.08.62-.16.95.24 1.32.4.38 1 .27 1.3.03.31-.24.9-.8 1.43-.97.53-.18 1.09-.32 1.38-.62.3-.3.22-.5-.09-.67-.3-.17-.6-.1-.84-.36a1.58 1.58 0 0 1-.26-1.2c.09-.3.2-.17.2.05 0 .23 0 .44.23.72.22.29.42.43.77.65.35.23.58.59.13.9-.43.32-.68.5-1.05.65-.37.15-.97.51-1.34.88-.36.38-.57.71-1.29.71-.72 0-1.05-.18-1.26-.61-.15-.3-.22-.26-.56-.28-.34-.01-1.47-.03-2.35-.01-.88.01-1.17.16-1.57.5-.4.33-.54.58-1.29.33-.75-.26-1.14-.54-2.26-.77-1.11-.23-.51-.12-1.19-.27-.67-.15-.63-.48-.54-.75.09-.27.3-.7.12-1.25-.2-.56-.12-1.13.4-1.13.5 0 1 .1 1.2-.58.2-.7.26-.15.2.03s-.09.67-.54.75c-.46.07-.56-.03-.84-.03-.28 0-.4.2-.25.53.15.33.31.67.28.96-.03.28-.06.39-.26.66s-.18.4.19.5c.36.08 1.03.26 1.64.42.62.14.66.14 1.73.43 1.08.29 1.37-.23 1.46-.84.09-.62-.33-1.2-.7-1.79-.39-.59-.8-1.26-1.3-1.88-.5-.61-.8-.66-1.04-.52-.25.13-.3.1-.3-.24-.02-.35-.05-.57.23-1.09.27-.5.52-1.06.82-1.92.3-.86.55-1.02 1.05-1.76.5-.73.28-.45.63-.94.36-.5.25-.4.23-1.2l-.1-2.25" fill="#231F20" mask="url(#tech-unix-linux-b)" />
   </g>
   <path d="M24.36 23.97c.01-.07.04-.19.1-.2.02-.01.04 0 .04.02.02.04-.02.26 0 .3.01.06.07.05.11.04.1-.03.16-.16.16-.17-.02 0-.04.06-.08.07-.03.01-.05 0-.06-.02-.01-.03.03-.26 0-.31 0-.06-.06-.07-.1-.05-.12.03-.16.2-.2.3l.02-.23-.13.04-.01.5.13-.05c0-.09 0-.18.02-.24m.59.05c.1-.04.15-.17.15-.19-.02 0-.04.08-.1.1-.03 0-.05 0-.06-.02v-.33l.15-.06v-.05l-.15.05v-.2l-.13.07v.58c.02.06.08.07.14.05" fill="#231F20" />
  </g>
 </symbol>
 <symbol id="tech-windows-file-shares" viewBox="0 0 40 40">
  <path d="m12 14.27 6.54-.9v6.3l-6.53.03-.01-5.43zm6.54 6.12v6.3l-6.53-.9v-5.44l6.53.04zm.79-7.13L28 12v7.59l-8.67.06v-6.39zM28 20.45V28l-8.67-1.22-.01-6.35 8.68.02z" fill="#00ADEF" />
 </symbol>
</svg>
      
      
    </div>
  
<script async type="text/javascript" src="/_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=2&cb=1083948383"></script>
</body></html>